The opening story about the emergency wire transfers made me think of this inheritance emails. Also surprised in so many levels to see how easily they pulled it off. Great insights, thanks for putting this together.
it was great working with Joel for this collab! it’s actually surprising to me how getting a little bit of trust and social assurance will get people to drop their guard so much. appreciate it!
Indeed so! Glad you enyjoed the process, too. But also, isn't it worrying to see the gap between non-technical people in government places and the tech world?
This is why protocols matter more than training. The rule has to be structural and non-negotiable. Any request involving money, access, or sensitive information that arrives with urgency and authority gets stopped immediately, the call ends, and you call back on a number your organization already has on file. No exceptions, regardless of how convincing the voice sounds or how familiar the situation feels.
Thanks again to Joel for hosting this! As always, feel free to ask either one of us questions in the comments!
This crazy!!
😁
Failure is so important in many situations. It builds believability in to the case, and the fact that each of us can do it. Great shout out.
thanks! and in full agree. believability is huge. 🔥
Saving for future reuses
awesome to hear :)!
Glad to hear, Andrei
Collab of the greats! Nice one, guys.
appreciate it 😁🔥🔥🔥
🙌
🥳
Practice under pressure changes how teams react.
It absolutely does!
The opening story about the emergency wire transfers made me think of this inheritance emails. Also surprised in so many levels to see how easily they pulled it off. Great insights, thanks for putting this together.
it was great working with Joel for this collab! it’s actually surprising to me how getting a little bit of trust and social assurance will get people to drop their guard so much. appreciate it!
Thank you, Nihal! It is pretty amazing, ToxSec did a great job here.
Indeed so! Glad you enyjoed the process, too. But also, isn't it worrying to see the gap between non-technical people in government places and the tech world?
Oh yes!! 💯
This is why protocols matter more than training. The rule has to be structural and non-negotiable. Any request involving money, access, or sensitive information that arrives with urgency and authority gets stopped immediately, the call ends, and you call back on a number your organization already has on file. No exceptions, regardless of how convincing the voice sounds or how familiar the situation feels.