blunders

1,175 reputation

225

bio	website
	location
	age
visits	member for	1 year, 11 months
	seen	Apr 15 at 22:03
stats	profile views	83

Ask a question on the new Linguistics site on Stack Exchange.

	1,175 reputation	bio	website		visits	member for	1 year, 11 months
225 badges		location			seen	Apr 15 at 22:03

summary answers questions tags badges favorites bounties reputation activity

261 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 12	awarded	Popular Question
Jan 12	awarded	Popular Question
Dec 14	awarded	Popular Question
Aug 23	accepted	Fostering an environment where honesty and disclosure are valued
Aug 23	comment	Fostering an environment where honesty and disclosure are valued +1 @schroeder: Agree, thanks for the quick reply, and meaningful response. I've award you the bounty, and selected you as the answer, congrats!
Aug 23	comment	Fostering an environment where honesty and disclosure are valued Given tylerl hasn't respond to this question I'll ask you: what do you make of the difference between your answer and tylerl's answer? To me while they both point towards the mechanics of behaviour modification techniques, they're different. Do you believe they're difference answers, and if so, why? Ask because I'm attempt to decide who to give the bounty too. Thanks!
Aug 22	comment	How to make an outbound request to users to update their passwords? @Ramhound: Thanks for the feedback. Have you read the answers currently posted? Also, don't understand what the function of the "new password" would be, please explain more if possible. Again, thanks!
Aug 21	comment	How to make an outbound request to users to update their passwords? +1 @Jeff Ferland: Edit looks good to me, thanks!
Aug 21	comment	How to make an outbound request to users to update their passwords? Really don't have an answer in mind; guessing that answer would likely be based on practices in jurisdictions that require by law that users be notified. And yes, believe everyone that knows about password resuse would understand why a breach needs a notification.
Aug 21	revised	How to make an outbound request to users to update their passwords? deleted 7 characters in body
Aug 21	comment	How to make an outbound request to users to update their passwords? Me, or you... :-)
Aug 21	comment	How to make an outbound request to users to update their passwords? -1 Oddly, you're the user that lead to me posting this; randomly clicked your profile before the post, and saw your most recent post on Linkedin thought I'd ask a question about it. Given how many users reuse passwords, find it hard to believe the best practice is to wait for the user to login, or organically hear they need to reset their passwords; use passwords in the plural, since I assume the average user uses their password on more than one account. Gave the -1 since you said the best answer is not to do anything until the user uses the password.
Aug 21	comment	How to make an outbound request to users to update their passwords? @Iszi: Correct; their consultants must have had practices for making outbound requests.
Aug 21	asked	How to make an outbound request to users to update their passwords?
Aug 21	comment	Fostering an environment where honesty and disclosure are valued Right, the awareness training is for users that enable an attack, or fail to report an attack even though they believe they stopped the attack. By benchmark, I meant have you done a baseline simulated attack to see what percent of users either enable or report the attack without training, then do training followed by another simulated attack that's paired with meaningful followup to the users? Point being that without a baseline, it's hard, if not impossible to tell what the effect was of the training; make sense? Thanks!
Aug 21	comment	Fostering an environment where honesty and disclosure are valued +1 Thanks for sharing; agree it's not an exact match, but of use none the less. Have you done simulated attacks (paired with awareness training) to benchmark user response to your training? If not, why?
Aug 21	awarded	Popular Question
Aug 20	revised	Should SMS systems warn users of possible spoofing attacks? deleted 2892 characters in body
Aug 20	accepted	Should SMS systems warn users of possible spoofing attacks?
Aug 20	comment	Should SMS systems warn users of possible spoofing attacks? Summary of Topic: 1) Vendors should not be blamed for conforming to a standard. 2) Vendors should be applauded if they take steps to address the shortcomings for a standard without breaking compatibility. 3) Vendors should be blamed if they break compatibility with a standard.