Live data from Hacker News

Launch HN: Riot (YC W20) – Phishing training for your team

news.ycombinator.com

31–40 of 93 posts

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#32
post #11

> Would love to hear your war stories on phishing scams, and how you train your teams! I was working on anti-phishing in 2003, before it had the name phishing. We were trying to teach our users not to fall for the scams. It didn't work. People will fall for the same scam over and over. The conclusion we came to was that the only solution to phishing was education, and education was also nearly impossible to get 100%…

According to Wikipedia, the term phishing (or fishing) originated in the mid-1990s

The term was coined in the 90s, but didn't get widespread usage until the mid-2000s. So yes, technically it had that name already, but no one used it then.

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#33
post #24

Earlier quoted context omitted.

I actually started coding in 2000 trying to hack my brother, so I can relate: phishing has been a never-ending story. It's still worth trying though!

Definitely worth trying! Just want to help you set expectations. :)

Thanks!

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#34

Why is this any better than product offerings from PhishMe, Wombat, or KnowBe4?

Most of them target big companies. It makes a very different product.

I have a fun story with Wombat: I tried to use the product in my previous company (100 employees), had 4 different calls, with 4 different sales persons, during 2 months. At the end they just forgot about me.

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#35
post #24

Earlier quoted context omitted.

I actually started coding in 2000 trying to hack my brother, so I can relate: phishing has been a never-ending story. It's still worth trying though!

Definitely worth trying! Just want to help you set expectations. :)

Did you try punitive disincentives?

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#36
post #29

I work at a large professional services firm (think Big 4), so the risk of any single breach in our network is taken pretty seriously. Our IT department added an Outlook plugin years ago that you can use to immediately reporting phishing attempts to them. As a bonus, they'll sometimes send these "tests" and if you select to "Report Phishing", you'll get a atta-boy type notification. I would assume at a macro level, t…

1. I've talked with a lot of companies (Stripe for example) who do that internally and it takes a tremendous amount of time to set up.

2. For now attacks are very generic, but will soon be sector-based and department-based.

3. Yes for sure it's probably worth adapting the pace of the attacks depending on the level of the employees.

Thanks for the kind words!

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#38
Pricing feedback. I would love this type of training for our small team of 12 people BUT at this time, I cannot spend $199/Month even though one could argue that there is no cost high enough for security. Perhaps add another smaller tier for companies with 20 or less employees in the 2 digit range ?

Re: Launch HN: Riot (YC W20) – Phishing training for your team

#39

Pricing feedback. I would love this type of training for our small team of 12 people BUT at this time, I cannot spend $199/Month even though one could argue that there is no cost high enough for security. Perhaps add another smaller tier for companies with 20 or less employees in the 2 digit range ?

Sure! Pricing is actually very hard to set up.
Post reply on HN