All our actions are defensive.
Look at our physical security. Basically nothing is reasonably protected. 99% of stuff (buildings, locks) can be broken into with tools available in any home depot.
The key reason why it doesn't happen that much is because it's possible to find the attacker.
Why can any scammed just create a website without any traceability? It wouldn't be foolproof, but it would raise a bar.
because jurisdictional challenges.
Not to mention that this very same traceability would be abused by some other authoritarian gov't to track down dissidents for example.
There's no real way to systematically have good security, if the human element is the weakest link tbh. Securing windows is not a technical problem, but a social and educational one.
Does the domain/server implements required level? No? Block connection. Dtto email with automatic response.
Is your IP in a botnet? Cut it off.
Edit: I already get blocked connection (on target site) because EU regulation is too onerous. I get reminded on basically every Google search I am being censored (Some results may have been removed under data protection law in Europe).
Completely doable.
More like "we want to track every single user coming to our website without giving them the option to not be tracked".
I have been part of se several GDPR compliance projects and it's the other stuff that's the problem.
Data protection officer (recurring cost, even though it is only a part of a job, not full time position) , user data deletion and user data take-out. Compliance is not free. If system wasn't designed from the beginning, it's really expensive to add it.
Restore from backup after disaster recovery - make sure you anonymize/delete people who were deleted after backup was made.
BTW, IP address is PII, so...
Honestly, it would be cheaper to buy everyone in EU VPN.
Why? While I get that, if tracking is part of someone's business model, they want to track as many people as possible, I doubt it would be illegal to give also people that aren't in the EU the option to not be tracked. If it really would be so expensive to be compliant while also differentiating between users connecting from the EU and users connecting from outside the EU, why not just give everyone the option to choose if they want tracking as a measure to cut compliance cost?
Add IP rules at cables inside and out of let's say EU and block it there.
Same way we deal with any non-compliance thing. You can't import it.
Your server/domain doesn't satisfy requirments. Either the originator complies or not (e.g. through trusted third party).
So far, we are building walls and replacing mortar with a new one, while attackers bombard us with complete impunity. This is never going to work.
This would of course need new extensions /protocols (even simplest would require authentication envelope around encrypted traffic).
Not a single response had anything to do with either problem ITA or my comment.
I am not sure if you are troll, 10 y/o or gpt1, but have a nice day.
Try to get a company built around Word to use another tech that doesn't requires running unsigned macros from emails...
You literally can't, they lough at you for saying things like "don't use Microsoft"
The difference for software being marketed like that is that most of its users do not have the knowledge to (in-)validate such claims, so some will believe it. Consequently, some of them lose various amounts of money due to lacking security. Some others don't, so all is fine.
Ultimately he's a businessman seeking for more money. Doesn't mean he can be trusted.
Fortunately, my work email supports IMAP, so I can use a script to scan my inbox for fake phishing emails and delete them.
Last month I was in conference where the keynote was from CEO of cyber security company. The whole point of the speech was that we need more money because in some cases more than 80% users still fall into email scams. My very serious question to the speaker was - if after many millions and almost 25 years more than 80% users still click on wrong links, then maybe we do something really wrong?