ncweaver, 7 months ago

@RGB_Lights
What burns me MORE is that at Berkeley every year I got a reminder email about the mandatory training. That REQUIRED me to click a link to a long URL at a third party site in an HTML-ecnoded email that redirects to the University login page where I need to input my password.

No, this was not a phishing test. This was how you are SUPPOSED to log into take the mandatory training. I guess they were training people to be phished.

SteveBellovin, 7 months ago

@ncweaver @RGB_Lights This is yet another reason why I use a password manager—when I get redirected to the university's single sign-on page, I know that the PW manager won't be fooled by a funky domain name, and the standard login site is the only thing that sees my credentials.

wordshaper, 7 months ago

@ncweaver @RGB_Lights Some of my favorite corp emails have been the ones from the security team saying "thank you for reporting these training emails as phishing. It's fine they're legit" and you could tell someone was raging while they were forced to type it out.

Tarah, 7 months ago

@RGB_Lights TFW you know you're about to get Rickrolled by the NSA cyber director and you're like w/e I actually want to hear Rick Astley rn CLICK IT

Tarah, 7 months ago

@RGB_Lights iiiiiii just wanna tell u how i'm feeeeeeelin

flippac, 7 months ago

@RGB_Lights Rickrolls: the SFW goatse

LordCaramac, 7 months ago

@flippac @RGB_Lights I need to make some Goatse stencils again. People who don't know the original often don't recognise it.