hackertube.io

Ichthyology: Phishing as a Science

Black Hat · talk · Watch on YouTube

Security & hackingPrivacy, surveillance & cybercrime

What it is

Karla Burnett presents real phishing campaigns run against a Bay Area tech company, including conversion rates and how existing protections were bypassed. She argues for evidence-based techniques to prevent credential phishing, not just mitigate it.

Why Hacker News recommends it

HN people cite it to show even technical users fall for phishing and that hardware security keys are the real fix.

  • 3 people recommended it
  • 3 different months
  • 0 strong recommendations
  • first 2018, last 2025

What HN commenters said

  1. “shows just how easy it is to phish even users who think they are too good to be fooled.”

    Shows how easily even sophisticated users get phished.

    dmbaggett, 2019-05 · Recommendation · in “Should Failing Phish Tests Be a Fireable Offense?”

  2. “There’s a great talk at Black Hat about how Stripe trains staff against these sorts of phishing campaigns”

    How Stripe trains staff against phishing; technical people still click.

    procinct, 2021-06 · Recommendation · in “Can Apple change ads?”

  3. “Her conclusion, in a really well-done talk, was that it was impossible.”

    Concludes only yubikeys stop credential phishing.

    x0x0, 2025-09 · Recommendation · in “We all dodged a bullet”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: phishing, security keys, black hat, credential theft, social engineering

Also recommended by the same people