Can’t make the wrong people look bad.
this post was submitted on 22 Jul 2026
451 points (99.3% liked)
Dull Men's Club
4469 readers
81 users here now
An unofficial chapter of the popular Dull Men's Club.
1. Relevant commentary on your own dull life. Posts should be about your own dull, lived experience. This is our most important rule. Direct questions, random thoughts, comment baiting, advice seeking, many uses of "discuss" rarely comply with this rule.
2. Original, Fresh, Meaningful Content.
3. Avoid repetitive topics.
4. This is not a search engine
Use a search engine, a tradesperson, Reddit, friends, a specialist Facebook group, apps, Wikipedia, an AI chat, a reverse image search etc. to answer simple questions or identify objects. Also see rule 1, “comment baiting”.
There are a number of content specific communities with subject matter experts who can help you.
Some other communities to consider before posting:
5. Keep it dull. If it puts us to sleep, it’s on the right track. Examples of likely not dull: jokes, gross stuff (including toes), politics, religion, royalty, illness or injury, killing things for fun, or promotional content. Feel free to post these elsewhere.
6. No hate speech, sexism, or bullying No sexism, hate speech, degrading or excessively foul language, or other harmful language. No othering or dehumanizing of anyone or negativity towards any gender identity.
7. Proofread before posting. Use good grammar and punctuation. Avoid useless phrases. Some examples: - starting a post with "So" - starting a post with pointless phrases, like "I hope this is allowed" or “this is my first post” Only share good quality, cropped images. Do not share screenshots of images; share the original image.
.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Ive often suggested to our security team that they send one out spoofing the monthly mandatory training vid
The issue is that people's egos get bruised when they fall for it, and they'll very quickly get management on their side that certain ones are unfair, as if phishers give a shit about fair.
What I really love is how my workplace uses some man in the middle crap to replace every link in every email with a new one redirected through our cyber security link scanning product, so now there's no way to check the actual link before you click it since they're all just like
garbagesec.com/4a12c89e7fnow.Yours too? I hate it. I can't scan the URL and it drives me crazy. You just took away a way to identify a scam attempt.
Our IT solution to that was to MITM all the links except for the phishing tests. So anyone savvy enough to realize that always passes.
Ours is exactly the same as this lol. The joke is we are an IT firm so everyone except from sales and hr easily detetct it.
But real phishing emails will have the same treatment as normal emails making them harder to detect. Sounds like a really bad system that probably doesn't offer any advantages over a pihole.
Ours seems to set a header like X-Phishing-Test on the email so it's trivially easy to get them right every time
In my experience, its usually upper management that fails the phishing attempts.
At work, we use Safe Links in Microsoft Defender so examining the URL of a link in an email was always a pain, but Microsoft actually made a useful change recently. Now when I over over the link in Outlook, it displays the Original URL without all of the Safe Links gibberish. The link itself still goes through Safe Links, but the hover shows me the destination URL. I was pleasantly surprised when I noticed this.
PFF I don't click on any training emails unless my manager is asking about it in person.
If it's not important enough for them to follow up on, it's not important.
Yeah I created a rule that checks for a specific header in the mail from the phishing test platform, and junks those emails. Luckily, also the monthly security training emails also have the same X header