173
Study concludes cybersecurity training doesn’t work (www.kpbs.org)
submitted 1 year ago by to c/cybersecurity@infosec.pub
48 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 42 points 1 year ago (8 children)

That's a shame, although I unfortunately have no problem believe that's the case in general. I still personally benefit from the social engineering resistance training I've had over the years to this day though.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 26 points 1 year ago* (last edited 1 year ago) (1 child)

    I still personally benefit from the social engineering resistance training I’ve had over the years to this day though.

    Me too, I use it to get out of situations I don't want to deal with. "Ohh you're calling me asking for PII? Sorry, i can't provide that information unless I initiate the conversation. I'll call the number I have on file for you to provide that."

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 21 points 1 year ago (5 children)

    My toxic trait is believing that not answering the phone from unknown numbers is protecting myself from outside attackers

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 12 points 1 year ago* (last edited 1 year ago) (2 children)

    It might be rudimentary, but I wouldn't say you're wrong.

    Alternatively, pick up but answer the phone only with the word "Yes?", "Speak" or "You may proceed" (preceded by 'this line is now secure').

    Then, when they ask "who is this?" answer that "if you don't know, you have the wrong number" and that "this call is currently being traced, pending review of a 'military tribunal'."

    Do this with the flattest intonation you can manage.

    That tends to get to them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 1 year ago* (last edited 1 year ago)

    My SIM provider has the option to not even route unknown callers to my device. Not that I get any, but just in case, even if it is not that common in Germany.

    What some family of mine had to go through was social engineering harassment calls with some BS reasoning to get them to say "Yes"/"I agree" or something like that

  • permalink
  • fedilink
  • source
  • parent