4 ms·
Assuming a security analyst is allowed to look at content that's been identified as malicious beyond some threshold like 99.9%... And in order to address emerg
by 13of40 3y ago
Assuming a security analyst is allowed to look at content that's been identified as malicious beyond some threshold like 99.9%...
And in order to address emerging threats, they should be able to apply their judgement based on threat indicators like known bad hashes, origin from known bad email addresses or IPs, etc. to call something malicious beyond that threshold...
Does that mean that if they know your account is under attack they can just read all of your emails?
I would give that a big "no" because unless your account has 999 malicious emails in it for every benign one, they have not met the criteria.
- coldtea 3y ago>Does that mean that if they know your account is under attack they can just read all of your emails? If they "suspect" it is more like it in practice, suspecting also meaning "when they want to target you".
- 13of40 3y agoMy point is that unless they can make a case that some random email from your inbox is 99.9% likely to be malicious, then they should not be able to read it. Yes they have a button that lets them read it, but they should not press that button, and if they do they should get their ass sent to the clink.
- coldtea 3y ago>but they should not press that button, and if they do they should get their ass sent to the clink They'll be the ones helping send others to the clink and being best buddies with those who do, so fat chance of that restraint or punishment getting to them.