Slashdot Mirror


Fake "Bill Gates" Message Dupes Top Tools

yahoi writes with this excerpt from Dark Reading that might raise sysadmins' eyebrows about email security, in particular given the big names involved: "A researcher who conducted a successful spear-phishing experiment with a phony LinkedIn invitation from 'Bill Gates' is about to reveal the email products and services that failed to filter the spoofed message — and that list includes Microsoft Outlook 2007, Microsoft Exchange, Outlook Express, and Cisco IronPort. ... The experiment was aimed at measuring the effectiveness of email security controls in several major products and services. And the simplicity and success of the test demonstrated just how powerful social engineering can be and what little technology can actually do about it, security experts say."

2 of 117 comments (clear)

  1. Re:Old news by garaged · · Score: 0, Offtopic

    If only we all could revert the obsession of electronic money, that makes way more trouble than good.

    Money is totally virtual, and now there is a little fraction of the "actual money" on circulation and there is no way in hell we can put the other 90% of the money in circulation to actually combat poverty.

    Police is incapable of actually doing the job we need of them, so we cannot walk around the corner with more than a few bucks without being robed, so we use credit cards, just to discover that banks cannot do it's job either (take car of the money!!).

    It's kind of difficult to stop thinking in conspiracy theories when the solution to a problem makes more problems, and when a country go and make a war against a country because of fear of terrorist attacks, but doesn't do much about the drug usage of the people that provoques thousands of killings yearly.

    No phishing problems would exist if we didn't abuse of the electronic money, and most of the social engineering attacks would result in shame on the attacked, instead of the "stealing of (b)millions of dollars".

    I needed to leverage some steam, thank you very much.

    --
    I'm positive, don't belive me look at my karma
  2. Re:Mod parent thick as two short planks by Rysc · · Score: 0, Offtopic

    If you're trying to hand-deliver a letter at 3 in the morning, you'd better call ahead of time.

    What? And wake people up? Isn't it much more polite to just leave the letter in their box so that they can get to it when they're ready?

    It's not for "no reason" any more than not allowing people to run circular saws at 5am is "no reason." People have a right to live in peace, and that means no circulars or other crap dumped in their mailbox or on their porch after 8pm in most municipalities - we demanded the laws be passed in city council specifically to deal with the mountain of useless crap advertisers want us to pay to recycle.

    Whoa whoa whoa! For a second there I thought you said there was a law against using a circular saw at 5AM. If true, that's ridiculously outrageous.

    As for the rest, I am not talking about delivering a package or receiving junk mail. I am talking about me, let's say a love sick young man, hand delivering a note to a young lady's mailbox at an ungodly hour (because that's when I finished writing it, of course, and I simply cannot wait for the regular post!) If that's illegal, then that's insane. I am hoping you're speaking loosely and simply didn't realize you were implying "any message" and that we were not specifically talking about junk mail.

    Regardless, it sounds like I never want to live where you live. Quebec you say? I'll keep right out.

    We also have a program where you put a "no fliers" sticker on your mailbox, and even the post office won't deliver junk mail unless it's addressed to the individual occupant. Again backed up with fines of $300.00 to $1,000.00

    I see no problem with that.

    --
    I want my Cowboyneal