I employ a two-pronged defence against phishing:

First, I am so behind on reading my email that, by the time a phishing message actually gets read, the original scammers have probably had their site taken down, or maybe died of old age.

Second, I don’t know any of my passwords and, if your domain doesn’t match, my password manager won’t fill them, and I’m much too lazy to fill them manually, so will probably just close the window. If it looks important, I’ll flag the email and come back to it eventually. Maybe.

RE: https://infosec.exchange/@wendynather/116714739536238264

Life Hack: when an Old Person says, do you want to know how I got these scars, it's because they can see that you're about to do the thing that got them those scars.

Fred Rogers is the hero we should build statues of.

I say, for the millionth time. I'll say it as many times as it takes.