Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Facebook Helps Users Detect Phishing Emails
Newest First  |  Oldest First  |  Threaded View
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/24/2017 | 2:52:38 PM
Re: Not convenient enough
why they were targeted, And how they are targeted is important to know and explain the users.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/24/2017 | 2:50:24 PM
Re: Not convenient enough
For the standard user, I believe user awareness training to be a more efficient means of get security messages across. That is true. Security awareness trainings are the best way to go.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/24/2017 | 2:48:38 PM
Re: Not convenient enough
This may be fine for security oriented and technology oriented folks I would agree with this, it would mainly be discarded since not easy to use.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/24/2017 | 2:45:26 PM
Re: Won't add value
I would agree, it is not easy for the users to manage this.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/24/2017 | 2:43:22 PM
Any step is a good step
I say any step toward protecting users is a good step, it may not be efficient in the first go but I can still help
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/22/2017 | 8:11:17 AM
Re: Won't add value
For your post script reach out to a site administrator.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/22/2017 | 8:10:43 AM
Not convenient enough
This may be fine for security oriented and technology oriented folks, however to the typical facebook user this does not seem to a viable option to me. For the standard user, I believe user awareness training to be a more efficient means of get security messages across. Rerouting the user immediately and explaining what to look for, why they were targeted, and the overall risk.
paulfwalsh
50%
50%
paulfwalsh,
User Rank: Apprentice
12/21/2017 | 12:00:52 PM
Won't add value
This will help 000000.1% of Facebook users. Displaying emails sent in a place nobody knows, *after* they have been sent, is not going to produce enough juice to justify the squeeze.

p.s. your site doesn't allow us to login with Twitter or LinkedIn - doesn't work. 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-41393
PUBLISHED: 2021-09-18
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.
CVE-2021-41394
PUBLISHED: 2021-09-18
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.
CVE-2021-41395
PUBLISHED: 2021-09-18
Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.
CVE-2021-3806
PUBLISHED: 2021-09-18
A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write files on the system.
CVE-2021-41392
PUBLISHED: 2021-09-17
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.