lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
From: dufresne at winternet.com (Ron DuFresne) Subject: Is user education a lost cause? [SNIP] > > I think one of the "security community's" basic responsibilities is to > educate users and to never give up on educating users. After all, one > of the most important parts of our job is writing policy, is it not? If > that's true, and yet we don't believe users can be educated, then why is > policy writing so important? So one can claim the proper need to lart severly that person that opend his 6th copy of e-mail that day containing the same virus that his tem copies of e-mail the day before infefcted half his co-workers with yesterday. pebcak might well predate dos. > Obviously it's because we believe that > policy can change *most* users. Yes, there will always be some small > percentage that are either stupid or combative, but the vast majority > just need to understand the risks in order to know how to behave in a > secure manner. Actually no, the vast majority don't really care, it's someone elses job/responsiblitiy/property. I seldom lend out my tools to family or neighbors. I've learned that folks that use something they especially did not have to out of pocket for tend to treat that which is not theirs like it totally lacks any value. It's also why some companies are making their bottom line off training and retraining lusers for other companies. Herding cats is cheaper... I've told my boss many times, if uptime is the most important issue we face, then remove the lusers and I can give some dramatic uptime reports to him in a few months or years. Thanks, Ron DuFresne ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything.
Powered by blists - more mailing lists