Well, no one else comments in these threads, might as well.

I guess what I mean is, it’s a single point of failure. Usually an extremely strong one, granted.

Basically what diceware does. It’s just that humans are really bad at picking random words (“banana” is over represented, for instance) that’s what diceware helps with.

Diceware is a method of generating random memorable passwords.

Password managers are OK but I have hesitations on them personally. I’m leery of putting all my most high-value stuff in one place behind one password. What I do instead is memorize a truly unreasonable amount of passwords, though, which I recognize is not a reasonable expectation for others. For threat models in which you’re not worried about in-person attacks, it may actually be a good idea to just write your passwords down, maybe keep your password book in something with a lock on it. I’m not advocating for any particular method, just putting it out there so people can make an informed decision.

This is what you get for making me admin, I’ve gone mad with power, muhahahahaha!

crimes o-o

Hey, if that’s what’s fun for your group, fuckit, why not?

Words describe the world, they do not determine it.

Oh no, you weren’t supposed to take me seriously

Wait till you hear about necromancy

See what you do is, you put the peasants in a circle and have them pass a magnet to eachother. Put a coil of wire in the middle and you’ve got infinite free energy!

Every email client I can think of off the top of my head blocks images by default. And I don’t see how that relates to your criticism of the whole idea of anti-phishing training

Clicking the link hypothetically confirms to the spammer that yours is a valid and monitored email address, and that you’re a sucker suitable for more targeted phishing.

Of course, it seems like every random user will also happily type their password into any text box that asks for it, too.

One time I failed a phishing test because I did a message trace and confirmed that it originated from our own internal servers.

Nuthin, furloughed.

Inventory management. Can’t secure what you can’t see etc