2026-10-27 18:39 UTC
Replies (3)
-
@Catoblepas@lemmy.blahaj.zone 2026-10-27 18:56
Can you elaborate on this?
-
@balsoft@lemmy.ml 2026-10-27 19:17
No, you generally should not be worried about that. Generally the worst thing that a website can get from you just opening a URL is (1) whether or not you’re logged in to google/facebook/etc, (2) your advertisement profile/who you are, (3) roughly where you are. All those are privacy issues, not a security issue, hence not very related to the “cybersecurity course”. You should of course use various anti-tracking measures, e.g. an adblocker, “resist fingerprinting” in Librewolf, user agent faker, a good VPN, etc. That will reduce the exposure to all 3 issues above, but once again those are not security problems. If your browser shares authentication details with random websites you should stop using it immediately.
-
@bamboo@lemmy.blahaj.zone 2026-10-27 22:49
The thing is, a link in an email is not any different than a link here on Lemmy, yet we click on those all day. Yes, both could lead to a malicious website, and if you don’t have a recent web browser, then you could get in to trouble without any action. IMO, the only reason why there is a focus on phishing simulation in orgs is because email is something IT owns and you can easily track who does and doesn’t open an email. If there is a legitimate concern with opening random links, then phishing simulations would also extend to maybe peppering fake links on LinkedIn or other places where IT thinks their co-workers are browsing, but no one (AFAIK) does this.