5 ms·

There really ought to be a stronger sign of confirmed identity in business calls. Something cryptographic. Every single day I end up in business calls randomly

There really ought to be a stronger sign of confirmed identity in business calls. Something cryptographic. Every single day I end up in business calls randomly scattered across teams, WhatsApp, FaceTime, zoom, and a half dozen other systems. Instead we get stupid cartoon avatars and the ability to put a funny backdrop behind us.

DANmode 3y ago
For many of these "attacks", it could be thwarted as simply as opening the messages tab and seeing no prior history.
pavel_lishin 3y ago
I'm not sure if we have good enough systems in place, in terms of UX, for that to work. Imagine every C-level exec who's opened a top-urgent ticket with IT because their printer doesn't work (they forgot to plug it in/forgot it needs paper/it's not a printer, it's a paper shredder) trying to operate some form of key exchange software securely, while people capable of pulling off this sort of scam are targeting them. I don't think this is a problem that can be solved with technology.
- MichaelZuo 3y ago
  This doesn’t sound correct, why can’t it be solved with sufficiently advanced technology i.e. software and devices? We already have facial verification systems in hundreds of millions of devices that are genuinely very difficult to spoof.
  - pavel_lishin 3y ago
    > with sufficiently advanced technology Oh, you mean magic? :P
    - BlueTemplar 3y ago
      Wanna see a magic trick ? These $25M... waves hands gone !
- psychlops 3y ago
  A 2 of 3 key authorization would have gone a long way to preventing this.
- aiisjustanif 3y ago
  Zoom has MFA, including YubiKey.
- physPop 3y ago
  Then they shouldn't be C-level execs. We should expect more proficiency from people we pay so highly.
  - SoftTalker 3y ago
    I had to get on a Teams meeting the other day and it took me 15 minutes. And I've worked in technology for 30 years.
favflam 3y ago
Is PGP out for this use case? Doesn't the US military have DoD people plug in their ID badges to read/sign emails through outlook?

DANmode 3y ago

For many of these "attacks", it could be thwarted as simply as opening the messages tab and seeing no prior history.

pavel_lishin 3y ago

I'm not sure if we have good enough systems in place, in terms of UX, for that to work. Imagine every C-level exec who's opened a top-urgent ticket with IT because their printer doesn't work (they forgot to plug it in/forgot it needs paper/it's not a printer, it's a paper shredder) trying to operate some form of key exchange software securely, while people capable of pulling off this sort of scam are targeting them. I don't think this is a problem that can be solved with technology.

MichaelZuo 3y ago
This doesn’t sound correct, why can’t it be solved with sufficiently advanced technology i.e. software and devices? We already have facial verification systems in hundreds of millions of devices that are genuinely very difficult to spoof.
- pavel_lishin 3y ago
  > with sufficiently advanced technology Oh, you mean magic? :P
  - BlueTemplar 3y ago
    Wanna see a magic trick ? These $25M... waves hands gone !
psychlops 3y ago
A 2 of 3 key authorization would have gone a long way to preventing this.
aiisjustanif 3y ago
Zoom has MFA, including YubiKey.
physPop 3y ago
Then they shouldn't be C-level execs. We should expect more proficiency from people we pay so highly.
- SoftTalker 3y ago
  I had to get on a Teams meeting the other day and it took me 15 minutes. And I've worked in technology for 30 years.

favflam 3y ago

Is PGP out for this use case? Doesn't the US military have DoD people plug in their ID badges to read/sign emails through outlook?