Educause Security Discussion mailing list archives

Re: phishing irony


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Fri, 13 Feb 2009 11:42:49 -0500

On Fri, 13 Feb 2009 09:09:05 CST, "HALL, NATHANIEL D." said:
It might seem deceptive, but you don't have to tell them the IT department
sent the e-mail.  It is probably best if they don't know.

Are you willing to bet your IT department's reputation for honesty on whether
or not you have exactly *zero* users who have both the smarts and interest to
actually look at the Received: headers and see where it came from? ;)

Yes - you *could* send it from a throw-away freemail account someplace. But
then you better contact legal counsel - the last thing you want is to end up
another roadkill on the case law highway like Lori Drew did (she was the mom
who invented a ficticious Myspace identity to harass a 13 year old girl who
ended up committing suicide).  Bad cases make bad law, and the rubble hasn't
quit bouncing from that case yet...

Attachment: _bin
Description:


Current thread: