Should Failing Phish Tests Be a Fireable Offense?

Re:Should Failing Phish Tests Be a Fireable Offense? by alkonaut on Wednesday May 29, 2019 @05:18PM (#20045612)

If I’m curious I’ll open the link off the company network. Easiest way I can think of is just opening with a browser on my private iPhone while on a 4G connection.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by chelmzy on Wednesday May 29, 2019 @05:24PM (#20045666)

It would still trigger the fail. Typically the link contains an identifier and the landing page is hosted on a public facing web server.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by alkonaut on Wednesday May 29, 2019 @05:33PM (#20045763)

Yeah - I’d be wary of doing it without changing the parameters for that reason. But obviously you can’t check a link without checking a link.

It would also be interesting to hear whether someone actually considers me to have failed anything when visiting a (faux) attacker’s link on my own device off the company network and entering no credentials.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by Scoundreller on Wednesday May 29, 2019 @06:02PM (#20046050)

They’re probably not that advanced with it. If anything, you’ll upset IT with extra paperwork to grant you the exemption from the hit.

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by greedo on Wednesday May 29, 2019 @09:36PM (#20047561)

I wonder what happens when a bot crawls one of the phishing sites and triggers all the unique links...

[ Parent | on HN ]

Re:Should Failing Phish Tests Be a Fireable Offense? by alkonaut on Thursday May 30, 2019 @09:48AM (#20051070)

Next time I’ll try that. Hit all the Id’s but my own and take the day off when everyone else is sent to reeducation camp.

[ Parent | on HN ]