3 ms·

> "Hackers aren't necessarily smart, but operate from a set of well-known principles, Graham said. "If I have an e-mail list of victims, and a new 0day appears,

> "Hackers aren't necessarily smart, but operate from a set of well-known principles, Graham said. "If I have an e-mail list of victims, and a new 0day appears, I'm immediately going to phish with it. It's not Chinese uber APT hackers, it's just monkeys mindless following a script," he said." Define "hacker" and "smart." This is a mostly-useless article with little-to-no actual information in it. Oh, but the title claims to say how Anon stole Apple UDIDs, so now its on the front page of HN. ..

engtech 14y ago
"monkeys mindlessly following a script" -- social engineering is a script that is ridiculously successful at achieving its goals. Humans are always the weakest link. What's ironic is that if it hadn't been for all the FUD in the 90s against PGP, maybe PGP signing of messages to verify identity would have become the norm for email and it would be much more difficult to spoof. I wonder if anyone has ever thought of an option in gmail/googleplus for supporting PGP?