Emmanuel Phakula Mandala said:

@Trevor Chandler

Keepnet Free Phishing Email Analysis: This tool scans and analyzes suspicious emails to detect phishing attempts and provides detailed insights into potential threats

Click to expand...

Rick Butler said:

Of course they did.

Not even going to comment further - just going to say - trust another organization with your security and...well:

View attachment 2136

Click to expand...

Trevor Chandler said:

Too relaxed - like on Bourbon street in New Orleans :-(
It's unfortunate, but you almost just can never let your guard down!!!

That comment "It's not a matter of if, but when" applies to all levels of the public sector!
The U.S. Treasury? My goodness!!!!

Click to expand...

Rick Butler said:

Oh, I think security awareness is far more than phishing and passwords. And I'm not so sure they are even in the top five anymore.

Identity Protection is probably the most massive requirement now. Ransomware...malware protection, multi-factor authentication to replace those feeble passwords, are regularly part of security briefings and trainings now.

Click to expand...

Rick Butler said:

Well, no, the end user doesn't typically do these things. But RBL and SBL's can also interfere with e-mail transmission - preventing all those annoying spammers from setting up their own SMTP boxes and blitzing the world with spam.

Click to expand...

Trevor Chandler said:

I'm still failing to see how, where, the end user is able to control the email going into the Inbox vs
the Junk/Spam folders. That's what I'd like to achieve!!!

Click to expand...

Rick Butler said:

Spam Block Lists such as the ones maintained by organizations like Spamhaus can have quite an effect on whether messages get classified as junk/spam/phish, etc.

The MX Toolbox is a good place to check to see if a particular server is on a blocklist for spam/UCE. Properly constructed DMARC and SPF records on the domain level can greatly cut down on the amount of email blocking as a result of an internet blocklist.

Email Blacklist Check - IP Blacklist Check - See if your server is blacklisted

mxtoolbox.com

Click to expand...

Trevor Chandler said:

I'm gonna have to give this one a lot of thought. I'll have to get back to you later!

Click to expand...

Trevor Chandler said:

You didn't ask me, but I say it depends!

Click to expand...

Trevor Chandler said:

Vulnerability - Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source. Note: The term weakness is synonymous for deficiency. Weakness may result in security and/or privacy risks.

Threat - Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. Also, the potential for a threat-source to successfully exploit a particular information system vulnerability.

Click to expand...

Rick Butler said:

Your compliance requirements trump all of this. Not every organization has the same requirements, but, for example, an organization operating in California or Virginia will have a greater adherence to privacy than, say, in Florida, as states adopt their own versions of the EU's GDPR guidance.

General statements about security and privacy themselves are overly nebulous until we define what the asset is, its vulnerability, and threats - in other words, a risk assessment. Every individual, every organization must conduct a proper risk assessment along with compliance requirements before the questions of 'how much privacy' and 'how much security' are required.

I don't think it's a matter of which one gets precedence in a general sense, because it will vary in every single use case.

Click to expand...

Anthony Wanjohi said:

The choice depends on the context and specific needs. In some cases, security might take precedence to protect sensitive information from immediate threats. In others, privacy might be prioritized to ensure personal data is not misused or overexposed.

Security can exist without privacy, but privacy cannot exist without security.

Click to expand...

Trevor Chandler said:

destitute (adjective) - without the basic necessities of life.

You're right, I'm not that destitute. However, I have to be very sagacious in my expenditures!!!
One of the many pieces of wisdom that has been shared with me is, "It's not how much you make,
but it's how much you get to keep." That's my pilot when I'm contemplating spending on
non-essentials.

I'm not too proud to accept donations of any sort

Click to expand...

Trevor Chandler said:

There's something camaraderie that just works!!!!

And let me thank you again for your usual kind and considerate words!!!!

Click to expand...

Trevor Chandler said:

The idea you make reference to is not the use of a hammer is it

Click to expand...

Rick Butler said:

Well, no, the end user doesn't typically do these things. But RBL and SBL's can also interfere with e-mail transmission - preventing all those annoying spammers from setting up their own SMTP boxes and blitzing the world with spam.

Click to expand...

Rick Butler said:

In that case, then I would recommend going over to our good friends at Biohazard Coffee (https://biohazardcoffee.com/). 928mg of caffeine for a 12oz cup.

Even I had to cut it into regular coffee - that stuff is what powers gaming marathons.

Click to expand...

Rick Butler said:

C'mon, bud. With all the conferences you attend, you can't sell me on the notion that you're that destitute...

Click to expand...

Rick Butler said:

We'll just draw a picture.

View attachment 2137

Click to expand...

Trevor Chandler said:

I do appreciate your generosity good sir! The step before that though is to get past the little matter of funding for the subscription!

Click to expand...

jasoneckert said:

Insufficient caffeination should also be added to that list.

Click to expand...

Trevor Chandler said:

That's one that should be at the top of the list!!!!

Click to expand...

Trevor Chandler said:

Properly constructed DMARC and SPF records on the domain level are definitely part of the equation, but unfortunately, the end user has no access.

Click to expand...

jasoneckert said:

Insufficient caffeination should also be added to that list.

Click to expand...