Conversation

Notices

1. Embed this notice
   Bynkii (they/them) (bynkii@mastodon.social)'s status on Tuesday, 13-Feb-2024 02:51:30 JST Bynkii (they/them)

   I will say this until it is no longer true:

   If a non-admin user clicking on a link or opening up an infected word file damages anything on your network your security is shit.

   Periodt.

   • Paul Cantrell repeated this.
   • Embed this notice
     Kelly Shortridge (shortridge@hachyderm.io)'s status on Sunday, 25-Feb-2024 03:35:54 JST Kelly Shortridge

     in reply to

     • insecurity princess 🌈💖🔥

     @bynkii @saraislet I haven’t seen any real data on this, but if we assume the avg corp worker receives ~100 biz-related emails per day during the work week, that’s approx 26k per year. Let’s assume 50% have links.

     If they click on 1 malicious email link in a year, that’s a ~0.008% “fail” rate to them.

     Even if they click on 100 malicious links, that’s only ~0.8%.

     It’s entirely rational to click the damn links; spending even 1 min on scrutinizing each email adds up to 217 hours per year!