[{"data":1,"prerenderedAt":443},["ShallowReactive",2],{"project-9791686":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":45,"post_text":47,"what":48,"said":83,"maker_in_thread":192,"shape":202,"grid":206,"attempts":404,"same_week":405,"maker_shows":32,"maker_hidden":435,"reader_version":436,"card":437},"9791686","CuttlePhish","Phishing as a service","title","Show HN: Phishing as a service","https:\u002F\u002Fcuttlephish.com","cuttlephish.com","naftaliharris",1435443267,2015,155,69,130,2565,6,"notable","security_privacy","phishing simulation","web_app",[21,24,25,26],"security awareness training","phishing test","employee training","curious",-0.018,{"positive":30,"neutral":31,"mixed":32,"critical":33},7,20,1,8,36,{"idea":36,"execution":38,"docs":41,"design":42,"privacy":43,"pricing":44},{"positive":37,"critical":37},3,{"positive":39,"critical":40},0,2,{"positive":32,"critical":32},{"positive":40,"critical":39},{"positive":32,"critical":40},{"positive":39,"critical":39},[39,39,32,32,39,37,32,39,39,39,46,46,32,46,39,37,46,32,37,37,39,39,39,32,39,39,37,37,37,37,37,37,32,37,37,46,46,37,37,46],5,null,{"problem":49,"audience":61,"pricing":70,"motivation":47,"time_to_build":47,"stack":81,"openness":82,"stage":82,"team_size":82},{"value":50,"source":51,"evidence":52},"Measuring how employees respond to phishing emails","inferred",[53,57],{"id":54,"by":55,"text":56},"9792553","pspace","I work in security at a large Fortune 500 company. I know at first it sounds like phishing your employees will give you good insight, but you realize quickly that the data you…",{"id":58,"by":59,"text":60},"9792109","jedberg","There are many sites like this and I love what they are doing for raising awareness. As one of the first people to ever fight phishing (I worked at eBay and PayPal fighting…",{"value":62,"source":63,"evidence":64},"Corporate IT and security teams","commenter",[65,69],{"id":66,"by":67,"text":68},"9791737","watmough","Neat, but doesn't seem very IT\u002Fcorporate, which would surely be the intended audience. My company uses these guys: http:\u002F\u002Fwww.knowbe4.com\u002F",{"id":54,"by":55,"text":56},{"value":71,"source":72,"evidence":73},"Pay only when someone clicks a link (per-victim pricing)","maker",[74,77],{"id":75,"by":11,"text":76},"9791883","I'm sending the emails directly from my server with the unix \"mail\" utility. Ending up in spam is actually what most concerns me about this idea, and in fact this concern was…",{"id":78,"by":79,"text":80},"9791838","jwcrux","Neat! I really like the easy pricing model. Quick question - are you concerned about trademarks (Amazon and such) being included as the phishing templates? Reason I ask is that…",[],"unknown",{"praise":84,"objections":111,"requests":138,"questions":162,"alternatives":172},[85,100],{"value":86,"source":63,"evidence":87},"Useful service and refreshing idea",[88,92,96],{"id":89,"by":90,"text":91},"9792007","fokz","This is a useful service. But I imagine there will be some nontrivial issues regarding spam filtering, server reputation, legal, etc. How do you do email authentication? What are…",{"id":93,"by":94,"text":95},"9791858","talles","That's a refreshing idea for a change. Well done!",{"id":97,"by":98,"text":99},"9791745","andresmanz","+1! This thing is awesome. And that would make it even more awesome.",{"value":101,"source":63,"evidence":102},"Good FAQ and branding",[103,107],{"id":104,"by":105,"text":106},"9791840","zensavona","the FAQ page is 10\u002F10 https:\u002F\u002Fcuttlephish.com\u002Ffaq",{"id":108,"by":109,"text":110},"9791818","mikeknoop","Love the brand and name (reminds me of https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=GDwOi7HpHtQ).",[112,124,128],{"value":113,"source":63,"evidence":114},"Clicking a link does not show someone would fall for the phish; need login pages to measure real victims",[115,116,120],{"id":58,"by":59,"text":60},{"id":117,"by":118,"text":119},"9791991","Buge","I often intentionally click links to phishing sites, and sometimes enter in fake usernames and passwords. (I even wrote several bots to auto enter thousands of random usernames…",{"id":121,"by":122,"text":123},"9792061","runn1ng","Hm. I often click on obviously phishing links to see what's there. Would this tool classify me as a victim?",{"value":125,"source":63,"evidence":126},"Simulations only give pass\u002Ffail data and can anger employees",[127],{"id":54,"by":55,"text":56},{"value":129,"source":63,"evidence":130},"Emails may land in spam and trust in discarding credentials is a concern",[131,135],{"id":132,"by":133,"text":134},"9791861","hrbrtglm","How do you send your emails ? If your customer is using google domains, microsoft 365 or what else, and the employees do not fall in your phishing attempt and report your mail as…",{"id":136,"by":11,"text":137},"9791790","Thanks and thanks for the suggestion! One thought I'd had was longer\u002Fmore in depth campaigns. It's good to know other people would be interested in that as well. One thing I was…",[139,151,155],{"value":140,"source":63,"evidence":141},"Add credential-capturing login pages and self-hosting option",[142,143,147],{"id":58,"by":59,"text":60},{"id":144,"by":145,"text":146},"9792069","nitrogen","Or provide a self-hosting option; JavaScript can be changed at any moment. Request A might look fine, but request B for the same file 5 minutes later could be malicious.",{"id":148,"by":149,"text":150},"9791741","x0ry","Love it! My recommendation would be to offer an option for allowing the target to be tricked through the whole process. (Even if credentials are discarded completely.) The idea…",{"value":152,"source":63,"evidence":153},"Support for phishing via multiple channels beyond email",[154],{"id":54,"by":55,"text":56},{"value":156,"source":63,"evidence":157},"Flexible budget-based pricing",[158],{"id":159,"by":160,"text":161},"9792004","mfenniak","You could address that by creating a control on the price. \"I want to run this campaign against 500 users. But my budget is $100.\" The service sends out e-mails up to the $100…",[163,167],{"value":164,"source":63,"evidence":165},"Are trademark templates like Amazon legal to use",[166],{"id":78,"by":79,"text":80},{"value":168,"source":63,"evidence":169},"How are emails authenticated and spoofed past spam filters",[170,171],{"id":78,"by":79,"text":80},{"id":89,"by":90,"text":91},[173,177,181,188],{"value":174,"source":63,"evidence":175},"KnowBe4",[176],{"id":66,"by":67,"text":68},{"value":178,"source":63,"evidence":179},"Apozy",[180],{"id":54,"by":55,"text":56},{"value":182,"source":63,"evidence":183},"Phish5",[184],{"id":185,"by":186,"text":187},"9793182","gnyman","Another service which does a similar thing that's been around some time, I used them but the spam filter ate all my fake mail, as it should :-) https:\u002F\u002Fphish5.com\u002F",{"value":189,"source":63,"evidence":190},"GoPhish",[191],{"id":78,"by":79,"text":80},{"comments":193,"answered":40,"key":194},4,[195,196,199],{"id":136,"text":137},{"id":197,"text":198},"9792051","You might be right--that would definitely help people get further into the flow before the high-friction \"payment\" step. (If I went the \"pay to view report\" route I'd obviously…",{"id":200,"text":201},"9791870","Thanks, and very cool project! > Quick question - are you concerned about trademarks (Amazon and such) being included as the phishing templates? I'm honestly not 100% sure, but I…",{"commenters":203,"max_depth":18,"maker_replies":193,"first_comment_mins":204,"lifespan_hours":205},56,25,33,[207,211,214,218,220,223,225,229,231,235,238,241,243,246,248,251,254,257,259,262,266,270,274,276,278,280,284,285,289,293,296,300,303,306,310,312,315,317,320,322,324,325,329,332,334,335,338,341,344,345,349,351,355,359,360,362,366,368,370,372,377,382,384,386,390,393,396,399,400],[208,39,39,209,210,39],"9792493","commenter\u002Fpositive\u002Fidea","chrissnell",[212,39,39,209,213,39],"9792690","HaseebR7",[215,39,39,216,217,39],"9795820","commenter\u002Fneutral\u002Fnone","badinker",[54,32,32,219,55,39],"project\u002Fcritical\u002Fidea",[221,32,32,219,222,39],"9792934","lifeisstillgood",[58,40,32,224,59,39],"project\u002Fcritical\u002Fexecution",[226,40,39,227,228,39],"9792201","commenter\u002Fcritical\u002Fnone","kevinwang",[230,40,39,216,59,39],"9792235",[232,40,37,233,234,39],"9792492","project\u002Fneutral\u002Fexecution","bladecatcher",[236,40,39,237,133,39],"9793176","other\u002Fneutral\u002Fnone",[239,40,32,224,240,39],"9793314","tomjen3",[242,40,39,216,234,39],"9793427",[244,40,39,237,245,39],"9793067","psykovsky",[247,40,39,237,133,39],"9793170",[249,40,39,216,250,39],"9792258","twelvechairs",[252,40,39,216,253,39],"9792363","peteretep",[255,40,39,216,256,39],"9792419","marpstar",[104,37,46,258,105,39],"project\u002Fpositive\u002Fdocs",[260,37,39,237,261,39],"9791930","pbiggar",[263,37,46,264,265,39],"9791932","project\u002Fpositive\u002Fdesign","lukasm",[267,37,32,268,269,39],"9791999","project\u002Fcritical\u002Fdocs","ninjakeyboard",[271,37,37,272,273,39],"9793351","project\u002Fneutral\u002Fdocs","Intermernet",[148,193,37,275,149,39],"project\u002Fmixed\u002Fidea",[97,193,46,277,98,39],"project\u002Fpositive\u002Fidea",[136,193,39,279,11,32],"maker\u002Fneutral\u002Fidea",[281,193,37,282,283,39],"9791987","project\u002Fneutral\u002Fprivacy","afarrell",[144,193,37,282,145,39],[286,193,37,287,288,39],"9792169","project\u002Fneutral\u002Fidea","derefr",[290,193,46,291,292,39],"9792039","project\u002Fpositive\u002Fprivacy","pixellab",[294,193,37,287,295,39],"9792181","pktgen",[297,193,32,298,299,39],"9792183","project\u002Fcritical\u002Fprivacy","bigiain",[301,193,37,287,302,39],"9792248","ThrustVectoring",[304,193,37,282,305,39],"9792387","magicseth",[307,46,37,308,309,39],"9791934","project\u002Fneutral\u002Fpricing","randomflavor",[197,46,39,311,11,32],"maker\u002Fneutral\u002Fpricing",[313,46,39,216,314,39],"9792101","TeMPOraL",[316,46,39,237,273,39],"9793467",[318,46,39,237,319,39],"9794248","Manishearth",[321,46,39,237,273,39],"9796782",[66,18,39,323,67,39],"other\u002Fcritical\u002Fidea",[117,30,32,219,118,39],[326,30,39,327,328,39],"9792005","commenter\u002Fneutral\u002Fprivacy","chinhodado",[330,30,39,216,331,39],"9792035","ta92929",[333,30,39,216,118,39],"9795240",[121,33,37,287,122,39],[336,33,39,216,337,39],"9792088","randunel",[339,33,37,287,340,39],"9792382","amjd",[78,342,37,343,79,39],9,"maker\u002Fneutral\u002Fnone",[200,342,39,343,11,32],[346,342,37,347,348,39],"9792017","project\u002Fneutral\u002Fnone","chrisdevereux",[350,342,37,347,283,39],"9792033",[352,353,37,308,354,39],"9791935",10,"reagency",[356,353,39,357,358,39],"9791966","commenter\u002Fcritical\u002Fpricing","spydum",[159,353,37,308,160,39],[361,353,39,357,358,39],"9792022",[363,364,32,298,365,39],"9792068",11,"gitaarik",[185,367,39,237,186,39],12,[132,369,37,233,133,39],13,[75,369,39,371,11,32],"maker\u002Fneutral\u002Fexecution",[373,374,37,375,376,39],"9792012",14,"project\u002Fneutral\u002Fdesign","noobermin",[378,379,39,380,381,39],"9792074",15,"commenter\u002Fneutral\u002Fidea","ahmetmsft",[89,383,46,277,90,39],16,[108,385,46,264,109,39],17,[387,388,37,343,389,39],"9791880",18,"it_learnses",[391,388,39,216,392,39],"9792105","avn2109",[394,388,39,237,395,39],"9792981","gargarplex",[397,398,37,287,354,39],"9791936",19,[93,31,46,277,94,39],[401,402,39,237,403,39],"9791731",21,"jmatthew3",[],[406,411,416,420,425,430],{"id":407,"name":408,"points":409,"category":410},"9806319","Clearbit Logo API",525,"infrastructure",{"id":412,"name":413,"points":414,"category":415},"9810534","Arrow Hero",195,"games",{"id":417,"name":418,"points":419,"category":410},"9789960","a-sf-mirror",146,{"id":421,"name":422,"points":423,"category":424},"9784441","Hyperlax.tv",145,"consumer_social",{"id":426,"name":427,"points":428,"category":429},"9779097","hermetic",134,"languages",{"id":431,"name":432,"points":433,"category":434},"9775695","Reddit alternative",104,"web_saas",false,"v2",{"id":438,"name":5,"line":6,"ai":435,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":439,"top":18,"kw":440,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":441,"url":9,"mix":442,"praise":86,"objection":113,"sub":21},9791686,-0.02,[21,24,25,26],"0011031000551503513300010033333313355335",[30,31,32,33],1794036532833]