undefined | Better HN

0 pointsramraj079mo ago0 comments

I know not to click links on random emails but comfortably click links on emails I initiated from a website.

0 comments

How do you know the email comes from that website? There are known cases of phishing mails being sent when people expect a legitimate mail.

Yeul9mo ago

If someone hacks my account and starts ordering stuff on bol it's not my problem but the company's so I don't sleep over it.

The company doesn't care either because fraud is just the cost of doing business- ease of ordering> security.

KingOfCoders9mo ago

The website is

abc.com

the link in the email is abc.com

soiltype9mo ago

unless the product manager decided the link in the email is

track.monkey.exe/sus/path/spyware?c=behhdywbsncocjdb&b=ndbejsudndbd&k=uehwbehsysjendbdhjdodj

or something 2x–3x longer

KingOfCoders9mo ago

The question was "How do you know the email comes from that website? "

And the answer was, I can find out if the email is from abc.com by looking at the link, which should also be abc.com

I don't click in "track.monkey.exe". I don't click tracking links. I pay a lot of money for my newsletter provider because I can turn off (most) tracking links.

1 more reply

paradox4609mo ago

The link in the email is a mailchimp wrapped tracking link with a gibberish URL. What now

kibwen9mo ago

Or the email is rendered HTML, where the expected URL is used as the text for an anchor whose href is the malicious site.

1 more reply

KingOfCoders9mo ago

I don't click the link. Simple.

Track someone else.

Cthulhu_9mo ago

You do, but does the average user? Security's reliance on people's behaviour / knowledge / discipline should be minimal.

j / k navigate · click thread line to collapse

0 comments

roelschroeven9mo ago

How do you know the email comes from that website? There are known cases of phishing mails being sent when people expect a legitimate mail.

Yeul9mo ago

If someone hacks my account and starts ordering stuff on bol it's not my problem but the company's so I don't sleep over it.

The company doesn't care either because fraud is just the cost of doing business- ease of ordering> security.

KingOfCoders9mo ago

The website is

abc.com

the link in the email is abc.com

soiltype9mo ago

unless the product manager decided the link in the email is

track.monkey.exe/sus/path/spyware?c=behhdywbsncocjdb&b=ndbejsudndbd&k=uehwbehsysjendbdhjdodj

or something 2x–3x longer

KingOfCoders9mo ago

The question was "How do you know the email comes from that website? "

And the answer was, I can find out if the email is from abc.com by looking at the link, which should also be abc.com

I don't click in "track.monkey.exe". I don't click tracking links. I pay a lot of money for my newsletter provider because I can turn off (most) tracking links.

1 more reply

paradox4609mo ago

The link in the email is a mailchimp wrapped tracking link with a gibberish URL. What now

kibwen9mo ago

Or the email is rendered HTML, where the expected URL is used as the text for an anchor whose href is the malicious site.

1 more reply

KingOfCoders9mo ago

I don't click the link. Simple.

Track someone else.

Cthulhu_9mo ago

You do, but does the average user? Security's reliance on people's behaviour / knowledge / discipline should be minimal.

j / k navigate · click thread line to collapse