3 ms·
> “Click a link in the email” is a tiny bit better because it takes the user straight to the GOOD website, and passing that link to BAD is more tedious and ther
by roelschroeven 1y ago
> “Click a link in the email” is a tiny bit better because it takes the user straight to the GOOD website, and passing that link to BAD is more tedious and therefore more suspicious.
"Click a link in the email" is really bad because it's very difficult to know the mail and the link in it are legitimate. Trusting links in emails opens to door to phishing attacks.
- johnisgood 1y agoYeah, I was frowning when I read that. It is not any better at all, not even a tiny bit.
- ramraj07 1y agoI know not to click links on random emails but comfortably click links on emails I initiated from a website.
- Cthulhu_ 1y agoYou do, but does the average user? Security's reliance on people's behaviour / knowledge / discipline should be minimal.
- roelschroeven 1y agoHow do you know the email comes from that website? There are known cases of phishing mails being sent when people expect a legitimate mail.
- Yeul 1y agoIf someone hacks my account and starts ordering stuff on bol it's not my problem but the company's so I don't sleep over it. The company doesn't care either because fraud is just the cost of doing business- ease of ordering> security.
- KingOfCoders 1y agoThe website is abc.com the link in the email is abc.com
- soiltype 1y agounless the product manager decided the link in the email is track.monkey.exe/sus/path/spyware?c=behhdywbsncocjdb&b=ndbejsudndbd&k=uehwbehsysjendbdhjdodj or something 2x–3x longer
- KingOfCoders 1y agoThe question was "How do you know the email comes from that website? " And the answer was, I can find out if the email is from abc.com by looking at the link, which should also be abc.com I don't click in "track.monkey.exe". I don't click tracking links. I pay a lot of money for my newsletter provider because I can turn off (most) tracking links.
- soiltype 1y agoThe question was framed that way but in fact this conversation isn't about your personal resistance to a particular scam vector. Many sites do offload 100% of their emailing to 3rd party trackers. Therefore nobody can use those sites without engaging in 3rd party tracking. Therefore these sites have created an environment favorable for this scam vector.
- paradox460 1y agoThe link in the email is a mailchimp wrapped tracking link with a gibberish URL. What now
- kibwen 1y agoOr the email is rendered HTML, where the expected URL is used as the text for an anchor whose href is the malicious site.
- 1y ago
- radlad 1y agoHow would a phishing attack against a website which doesn't use passwords, only magic links, be performed?