News for hackers. Stuff that matters.

A comment on Should Failing Phish Tests Be a Fireable Offense?. Parent comment

Re:Should Failing Phish Tests Be a Fireable Offense? by BeetleB on Wednesday May 29, 2019 @04:53PM (#20045339)
>At the very least you're giving away everything your browser (even Lynx) puts in the headers of a request.

Which you're giving away any time you browse any external web site.

>Lynx supports cookies too so it would be possible to track a user between sessions.

You're downloading cookies for most external web sites.

If the worst you do is the same as going to espn.com, then reprimand people for going to any external web site.

[ Parent | on HN ]
Re:Should Failing Phish Tests Be a Fireable Offense? by onion2k on Thursday May 30, 2019 @03:41AM (#20049152)
The point is that you're giving data to a known phishing site by visiting the link in a phishing email. It's true that ESPN might also be a phishing site but it's less likely.
[ Parent | on HN ]
Re:Should Failing Phish Tests Be a Fireable Offense? by BeetleB on Thursday May 30, 2019 @10:33AM (#20051519)
And my point is the data you're giving is not important.
[ Parent | on HN ]