That is so fucking sketchy, I’d have to talk to the IT guy myself or get on a video call to make sure their email or the group chat or whatever wasn’t compromised.
is it tho? that’s a LAN IP, so just a file on the company’s network. browsers whine about http by default bc its security over WAN. then windows just whines about everything
well of course. just meant the IT guy didnt necessarily do anything sketchy or wrong, just a consequence of all those modern security prompts. totally get why folk would be apprehensive seeing that, deal with it all the time. but i’ve also never seen a company where they have an SSL cert for the LAN or something either, it just gets explained
I think teaching nontechnical employees that its okay to enter an IP address they don’t know, given to them by a remote person and bypassing security prompts would qualify as “wrong”.
by explain, i didn’t mean teach everyone it’s always okay to ignore security prompts. maybe that’s just how the cookie crumbled as the fix but it should’ve been explained why it’s being done that time, that’s where I think they’re wrong, I rescind that. you’re right that especially remotely it’ll create bad habits.
IME IT just walked our asses over when it’s something like that, never worked in a giant office, so that’s where I spoke from, ya feel me
If you told users those are internal and to use them they will quickly forget to verify the link as they were told previously to click on them anyways.
That is so fucking sketchy, I’d have to talk to the IT guy myself or get on a video call to make sure their email or the group chat or whatever wasn’t compromised.
is it tho? that’s a LAN IP, so just a file on the company’s network. browsers whine about http by default bc its security over WAN. then windows just whines about everything
Yes. An average employee doesn’t know the difference between public and private IP’s
well of course. just meant the IT guy didnt necessarily do anything sketchy or wrong, just a consequence of all those modern security prompts. totally get why folk would be apprehensive seeing that, deal with it all the time. but i’ve also never seen a company where they have an SSL cert for the LAN or something either, it just gets explained
I think teaching nontechnical employees that its okay to enter an IP address they don’t know, given to them by a remote person and bypassing security prompts would qualify as “wrong”.
by explain, i didn’t mean teach everyone it’s always okay to ignore security prompts. maybe that’s just how the cookie crumbled as the fix but it should’ve been explained why it’s being done that time, that’s where I think they’re wrong, I rescind that. you’re right that especially remotely it’ll create bad habits.
IME IT just walked our asses over when it’s something like that, never worked in a giant office, so that’s where I spoke from, ya feel me
Please use this link to ensure your security is up to date.
http://10.3.4.2/xbejdjr.exe
If you told users those are internal and to use them they will quickly forget to verify the link as they were told previously to click on them anyways.
User: I was told links with numbers are OK so I clicked on https://184.147.69.420.ru/spicy.exe, it even said https too!