Re:My Bank Keeps on Undermining Anti-Phishing Education
by dontTREATonme on Thursday July 17, 2025 @11:21AM
(#44594346)
I recently joined a very old company, with many lifers, I continuously run into this mentality. “I can’t explain it now, but I’m sure there was a good reason for it, so we’re gonna continue doing it this way”
Re:My Bank Keeps on Undermining Anti-Phishing Education
by isk517 on Thursday July 17, 2025 @11:48AM
(#44594638)
The real issue is that most business just don't document anything to do with their processes. Chance are that there are a hand full of things that there are a good reason for doing and they do need to be done that way. Except the people that identified that original problem and came up with original solution have all left the company so now there is nobody around that has put in the effort (or been given the time to investigate) to figure out why things are done the way they are, and the last time one of the things that had been done forever was suddenly stopped it caused untold amount of chaos so now the directive is to just keep doing everything we've always done.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by neuronflux on Thursday July 17, 2025 @11:46AM
(#44594619)
Of course it is typically wise to consider Chesterton's fence.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by anonym29 on Thursday July 17, 2025 @11:49AM
(#44594649)
Per Chesterton's Fence, isn't this the right course of action for any individual who is unsure of why the practice was started?
Re:My Bank Keeps on Undermining Anti-Phishing Education
by Y_Y on Thursday July 17, 2025 @12:23PM
(#44595033)
I like that fence, but I consider the best course of action to be going and finding out why the thing is done the eay it is, even if it necessitates careful investigation.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by anonym29 on Thursday July 17, 2025 @01:54PM
(#44596121)
I'd wholeheartedly agree with your assessment of the best course of action. To the points raised in the conversation above: there is definitely too little understanding of the pattern and too much blind adherence to the pattern as a widespread institutional practice across many institutions.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by Akronymus on Friday July 18, 2025 @12:08PM
(#44606361)
I always understood chestertons to be that you should leave the fence there while you are investigating why its there and whether its still needed. Not blind "dont do anything"
Re:My Bank Keeps on Undermining Anti-Phishing Education
by londons_explore on Thursday July 17, 2025 @11:25AM
(#44594379)
The extension to that is making it illegal to own/buy/use 'magic item Y', on the basis it enables fraud.
When they could just cut out the middle man and just make fraud itself illegal and not require the magic item at all.
This is almost always how these seemingly silly bureaucracy hoops become established. They were created in a prior time where a third party obtaining "magic item Y" with which to authenticate was significantly difficult to near impossible. Then, over time, the world, and technology improve, to the point where anyone, willing to spend $9.99, can have an exact duplicate of "magic authentication item Y" manufactured via any one of 78 different makers. But the bureaucracy continues using the now outdated process because "this is the way it has always been done".
It is largely a real world example of "The Monkeys, Bananas and Ladder Experiment": https://psychologyfor.com/the-monkeys-bananas-and-ladder-exp...