191–200 of 335 posts
Earlier quoted context omitted.
I recently reported an email with “glint.email.microsoft” as a phishing attempt, but it turned out to be a corporate survey.
Well it's probably hard for anyone except Microsoft to get a domain with the .microsoft TLD.
Here:
#!/usr/bin/env python3
from urllib.parse import urlparse, parse_qs
from sys import argv
print(parse_qs(urlparse(argv[1]).query)['url'][0])
Earlier quoted context omitted.
In Europe there are legitimate and extremely established services that require you to input your bank login details into something other than your bank's website. It's madness.
Care to mention what these legitimate and established services are?
Ah no need, corporate IT already make all URLs malicious looking through some microsoft "secure link" service, and constantly shows everyone shady looking prompts that constantly change and have cmd.exe windows flash in at random. A phone call from Microsoft about my Norton anti-virus subscription putting me into debt that can only be settled with Nintendo gift cards bought in cash across 16 specific gas stations see…
Earlier quoted context omitted.
Well it's probably hard for anyone except Microsoft to get a domain with the .microsoft TLD.
what percentage of the online population do you expect to understand this?
I could imagine something like x-mucrosoft.email etc. being used and the users would just be like well there was email.microsoft so same thing!
https://url.uk.m.mimecastprotect.com/s/?domain=
Earlier quoted context omitted.
In Europe there are legitimate and extremely established services that require you to input your bank login details into something other than your bank's website. It's madness.
There's no legitimate case for that since PSD2 (mandatory since 2020). Are you not confused by that? PSD2 doesn't share your credentials. I'm an European and have never needed to use nor encountered those services.
Ha! Great minds think alike. We have something that makes genuine links look malicious at work too. I think it’s called Microsoft Safelink or something. Its purpose is to go through your Outlook inbox and obscure the origin of every link because, obviously, being able to understand what you’re clicking on is bad. Remember kids, no one ever gets fired for buying Microsoft. ;)
Not sure if that's really a safe links problem, but it's super annoying.
Earlier quoted context omitted.
sighs . Seriously? Good to know though, if true.
German here. Absolutely true, and has been for many years now. Some examples: - grade D, poor performance: "We were satisfied with his performance" - grade C, meh: "We were entirely satisfied with his performance" - true grade A+: "We were always satisfied to the utmost degree with his performance" plus highly positive and extensive in the rest of the reference letter. - "was sociable": alcoholic - "was always strivi…
Ah no need, corporate IT already make all URLs malicious looking through some microsoft "secure link" service, and constantly shows everyone shady looking prompts that constantly change and have cmd.exe windows flash in at random. A phone call from Microsoft about my Norton anti-virus subscription putting me into debt that can only be settled with Nintendo gift cards bought in cash across 16 specific gas stations see…
If you really want to check every time someone clicks on a link then you can do this in the client and keep the visible link the same for the end user.
But instead there are different teams working on this in Outlook, Teams, Exchange, Defender and god knows where else.
(I'm one of the people in corporate IT trying to turn this off and often struggling)