[ianpenney]

As someone who takes this seriously I’m only working jobs where your ass will get fired immediately for clicking that link in the clearly dumb email.

If leadership won’t bring the same rigour of safety culture - which is mandated by legislation - to security? Don’t bother, just move on.

[OkayPhysicist]

Traveling to the wrong webpage pwning you is a piece of hacklore so outdated they replaced it with the updated QR code version. Clicking a link has not been a dangerous activity for years. When the rare browser exploit is discovered, it's patched immediately.

[gnabgib]

I must be misunderstanding you because phishing happens weekly with huge consequences. It's not browser exploits, it's an email that looks legit enough with an incorrect URL or a page that's so convincingly identical to PayPal you feed it the information. Just this week:

SitusAMC https://www.situsamc.com/databreach

Harvard University https://www.bleepingcomputer.com/news/security/harvard-unive...

Iberia Airline https://www.bleepingcomputer.com/news/security/iberia-disclo...

Salesforce via gainsight https://status.salesforce.com/generalmessages/20000233