phishing

Karla Burnett presents real phishing campaigns run against a Bay Area tech company, including conversion rates and how existing protections were bypassed. She argues for evidence-based techniques to prevent credential phishing, not just mitigate it.

Scam-baiter Jim Browning explains how he fell for a phishing email and ended up deleting his own YouTube channel. He walks through the circumstances and prior incidents that made the scam convincing.

Jake Archibald argues that URLs are nearly impossible for humans to interpret, especially for security. He walks through what browsers do about it, including highlighting the registrable domain, and floats a possible better design.