this post was submitted on 16 Jul 2023
89 points (93.2% liked)
Linux
48083 readers
848 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Smart people are not immune to moments of panic or laziness or cockiness. I don't know about you, but I don't always check email headers even tho that's the closest to best way to verify the identity of the sender. And if that link verifiably goes to a website I trust, and I was expecting them to reach out, and I just have to login to check my orders and... wait, why does the url have a "redir=" parameter? Oh fuck oh god oh fuck why does the login page say "amzaon.com" instead of "amazon.com" like in the email's link??? FUCK DAMMIT SHIT
This is definitely a situation where having a password manager with auto-filling is nice. When you save your login for
amazon.comit ties it to the URL as well. So if you end up going toamzaon.comby any means and don't manage to catch it, your password manager won't fill in your details because it doesn't recognize the domain.Of course, this won't stop you from say, using one of the "Login with Google/Apple/Amazon/etc" buttons on some dodgy website, and granting it access to your account (because you'd be redirected to
google.com/apple.com/amazon.com) but it's at least an layer of "Wait, something isn't right here" when the auto-fill doesn't trigger.Password managers are an absolute must-have in this day and age. That and MFA. And making as few accounts as humanly possible.
But, the more general concepts I'm trying to get at are that pobody's nerfect, you don't know what you don't know you don't know, and we're all just apes prone to lapses in judgment at innoportune times.
Oh for sure, I 100% agree! My reply was more of an educational "Hey, in case you've run into this before, this is a great way to prevent it from occurring again" sort of deal. No one is born with all-encompassing knowledge of the world and everything/anything they could ever interact with, and subsequently no one should be faulted for running into something like phishing scams where they're designed to exploit someone's potential lack of knowledge or even as you mentioned, a lapse in judgment.
I normally am good about avoiding phishing scams but almost fell victim to one because a close trusted friend of mine had their account compromised, and sent a link to something on Steam that seemed in line with what they'd normally bring up with me - and it was exactly the fact that my password manager didn't prompt me to fill in my Steam login details on that fake page that prevented me from trying to login.
(Well that and I do have Steam Guard/MFA enabled, but still)
Exactly, my last full time gig was in cyber, soc analyst. Stay at home dad now screw all that stress.