electricpete
Electrical
- May 4, 2001
- 16,774
It strikes me there is an attack vector to be phished via the publically available info about you as a PE. Well of course it's not that much a risk if you use normal good phishing resistance practices, but here's how it would work:
* starting with either a last name or a PE number, someone can pull up the other piece of information (your PE number or your last name) as well as dates associated with your PE, current employer, discipline etc.
* That seems like information that could be used to put together a personalized phishing email asking you to renew, with a link leading to a website (indeed my own state sends such link within their email), which would lead you to a pe renewal look-alike site that could havest at least your payment details.
Of course the standard practice to protect yourself is never follow the email link... go to the known correct website yourself. And that would protect you from any phishing. I suspect most here know that.
* starting with either a last name or a PE number, someone can pull up the other piece of information (your PE number or your last name) as well as dates associated with your PE, current employer, discipline etc.
* That seems like information that could be used to put together a personalized phishing email asking you to renew, with a link leading to a website (indeed my own state sends such link within their email), which would lead you to a pe renewal look-alike site that could havest at least your payment details.
Of course the standard practice to protect yourself is never follow the email link... go to the known correct website yourself. And that would protect you from any phishing. I suspect most here know that.