full-disclosure - [inbox] Re: CyberInsecurity: The cost of Monopoly

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <160640000.1064897885@localhost>
From: pauls at utdallas.edu (Paul Schmehl)
Subject: [inbox] Re: CyberInsecurity: The cost of
 Monopoly

--On Monday, September 29, 2003 19:30:24 -0600 Bruce Ediger 
<eballen1@...st.net> wrote:
>
> I realize you're from Texas and everything, but are you nuts?
> An 8-year old with a handgun should cause vast feelings of insecurity
> in you, with or without proper training on her part.
>
Hmmm...I am from Texas, and I can tell you that many an eight year old 
learns to handle firearms down here.  Not all of Texas is citified, you 
know.  We still have a lot of open range with coyotes and ground hogs and 
other things to shoot at.

> Besides that, what do you mean by "proper safety training" for a computer
> used?  If you mean the failed "don't click on any attachments, don't
> open email from someone you don't know" recipe-style of training, then no
> to that too.
>
No, I meant proper security training.  Is that so hard to understand? 
Regardless of the OS, every user should know how and why to patch.  Every 
user should understand what social engineering is, how to detect it and 
what to do about it.  Every user should understand physical security, 
locking your workstation, why you should logout and when, etc., etc.  Every 
user should understand the basics of malicious code, how to spot it, what 
to do about it, how to recognize hoaxes, where the resources are when they 
need help.

Without user training and an educated user community, no security program 
can ever hope to succeed.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu