Should Failing Phish Tests Be a Fireable Offense?

Re:Should Failing Phish Tests Be a Fireable Offense? by Dylan16807 on Wednesday May 29, 2019 @03:42PM (#20044486)

The risk of hitting an exploit on the command line, especially with something like wget, is enough orders of magnitude lower that I think it falls under acceptable. The standard cannot be zero risk because that's impossible. Even shutting off the internet link doesn't get you all the way to zero.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by kss238 on Wednesday May 29, 2019 @04:05PM (#20044745)

The issue isn't how much risk there is in opening it. The problem is that regardless of how much or little risk there is in opening the link, it wasn't op's job to examine it. It was unnecessary risk to open the link.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by Dylan16807 on Wednesday May 29, 2019 @04:36PM (#20045138)

It's unnecessary to look at something on imgur, too, but that doesn't mean you should get reprimanded if that causes a hack somehow.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by overgard on Thursday May 30, 2019 @12:29AM (#20048395)

I mean, it's not my job to refill the office coffee pot when I take the last cup of coffee, either, but since I'm decent to my coworkers I'd probably do it. Not the OP, but since I know how to open a malicious link safely in wget I would happily do that for similar reasons, and if I got reprimanded for it "not being my job"... I'd start looking for a new job where I'm respected for what I'm able to do.

[ Parent | on HN ]