4 ms·

> Bad faith actors are looking for easy, plentiful targets Citation needed, especially when we know that spear phishing is the simplest of the known exceptions

• alpaca128 3y ago
  Have you ever looked into the average email inbox? 99% of bad actors are simply casting a net as wide as they can to find the most gullible people. Targeted, specialized attacks are rare.
  • dspillett 3y ago
    > Targeted, specialized attacks are rare. But people basing their routines around the assumption that it won't happen to them, is why some notable attacks have succeeded. Obviously you need to base your practises around your own risk profile and their will be a point of limited likelihood of useful return on effort that will be different for different people/organisations, but some should be paranoid enough to worry about that other 1% of attempts.
• lapcat 3y ago
  How exactly is a bad faith actor going to spearfish [people who have temporarily installed the Apple private logging profile]? And why? What exactly do people like Howard, the article author, and me have in our private debugging logs that's interesting, useful, and worth spearfishing specifically people like us? Keep in mind, crucially, that the aerospace employees were publicly known via LinkedIn to be aerospace employees. How is it publicly known who has temporarily installed the Apple private logging profile? Who besides the article author would even announce that publicly? Also, the value of hacking an aerospace company is known. You can come up with any conspiracy theory you like, but the level of plausibility in this case is nonexistent.