However, I did learn my lesson and checking the email address of any suspicious email is the first thing I do now

@eff

@stefano PGP signing is 34 y.o. with several open source implementations that make it easy to sign and to verify email messages. I will never understand why business avoid it

LLM adds a whole new dimension to this sort of thing. I'll watch out for this in my own little world.

@stefano I'm frustrated because a solution to this problem exists for decades - its name is #PGP. Also it has it's disadvantages, problems and is of course not bullet proof, I wonder why nobody was able to design a GUI that is usable for most users with a few hours of training. You only need to understand 5 % of PGP to be able to use it.

I think convenience and lack of interest (until it's too late) are the main obstacles.

@stefano@mastodon.bsd.cafe I hope that they have learnt that a single email should not be enough to authorise a payment

I wonder how the scammers get samples of the president's emails to use?

@stefano WOW! In my case the person pretended to be my boss, and asked me to send him money in for apple gift cards... It sounded suspicious as hell, but I felt for it because I was new in the company. It was second week at the job and I didn't know anyone in the company well enough to make the correct judgement call.

I found the whole thing to be embarrassing because my major is in Cyber Security. To say I felt stupid, would be understatement of the year

😬