Re:My Bank Keeps on Undermining Anti-Phishing Education
by dontTREATonme on Thursday July 17, 2025 @11:21AM
(#44594346)
I recently joined a very old company, with many lifers, I continuously run into this mentality. “I can’t explain it now, but I’m sure there was a good reason for it, so we’re gonna continue doing it this way”
[ Parent
| on HN ]
Re:My Bank Keeps on Undermining Anti-Phishing Education
by isk517 on Thursday July 17, 2025 @11:48AM
(#44594638)
The real issue is that most business just don't document anything to do with their processes. Chance are that there are a hand full of things that there are a good reason for doing and they do need to be done that way. Except the people that identified that original problem and came up with original solution have all left the company so now there is nobody around that has put in the effort (or been given the time to investigate) to figure out why things are done the way they are, and the last time one of the things that had been done forever was suddenly stopped it caused untold amount of chaos so now the directive is to just keep doing everything we've always done.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by neuronflux on Thursday July 17, 2025 @11:46AM
(#44594619)
Of course it is typically wise to consider Chesterton's fence.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by anonym29 on Thursday July 17, 2025 @11:49AM
(#44594649)
Per Chesterton's Fence, isn't this the right course of action for any individual who is unsure of why the practice was started?
Re:My Bank Keeps on Undermining Anti-Phishing Education
by Y_Y on Thursday July 17, 2025 @12:23PM
(#44595033)
I like that fence, but I consider the best course of action to be going and finding out why the thing is done the eay it is, even if it necessitates careful investigation.
Re:My Bank Keeps on Undermining Anti-Phishing Education
by anonym29 on Thursday July 17, 2025 @01:54PM
(#44596121)
I'd wholeheartedly agree with your assessment of the best course of action. To the points raised in the conversation above: there is definitely too little understanding of the pattern and too much blind adherence to the pattern as a widespread institutional practice across many institutions.