Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by cm2187 on Tuesday March 01, 2016 @03:55AM
(#11201543)
In fact in my experience 99% of users are unaware that anyone can post an email on behalf of someone else's email address, even users under 30.
[ Parent
| on HN ]
Re:Snapchat Employee Data Leaks Out Following Phishing Attack
by lazaroclapp on Tuesday March 01, 2016 @05:37AM
(#11201908)
Of course, because, well, unless you know the whole story of email, down to knowing what SMTP is, there is zero reason to expect that the from address of your email client lies to you. Which is also why all web traffic should be over TLS, because the same can be said of domain names. This is one area of security where our systems really should be made to match the user's expectation, and not the other way around. This is not a "grampa doesn't understand the interwebs" sort of issue, this is clearly broken design.