[Sigia-l] What's your score?

[Listera]

Karl Fast:

> I got 6 out of 10, which is terrible.

Yes, but you're an academic so that's understandable. :-)

> But I labelled all messages phishing frauds if they came from an organization
> I didn't do business with. I didn't even look at the message in these cases.

That's not a very reliable assumption for the real world. People do indeed
respond to email from all sorts of originations. (Heck, people have donated
millions to relatives of deposed "Nigerian" dignitaries with abominable
English grammar. :-)

In fact, there are lots of brand names out there (from real-world banks to
online utilities) whose ubiquity and name recognition make them extremely
attractive vehicles for phishing.

> This was in accordance with the instructions. The question was "If
> you received one of these emails in your inbox, what would you do?"
> I don't do any business with Earthlink, so if I got email from them
> I would delete it.

The instructions didn't, however, say "from a company you're already doing
business with." Therein lies the dilemma I outlined above and I think the
empirical data speaks for itself.
  
----
Ziya

"Innovate as a last resort."