full-disclosure - Where is security industry gng??

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <41472190.28133.A063293E@localhost>
From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: Where is security industry gng??

Adam wrote:

> I believe you missed user EDUCATION?
> 
> a tools weekest point is ,,, You!

Sadly, this is all but a lost cause...

> as seen by the dork who was surfing the net on a box he was using as a server

_But_ why was there even a browser (at least one of the complexity and 
error-proneness of IE) on the box in the first place?

After all, MS put that browser there and insists it is a necessary, 
core part of the OS.  If the supposedly (well, "hopefully") informed, 
educated folk who should be preventing  such idiocy at companies with 
extra responsibility as MS has (its part of the cost MS bears for its 
size, market dominance and profoundly BS marketing line that computer 
systems have developed to the point where anyone that can use a mouse 
can adequately be let loose on the Internet) cannot prevent such idiocy 
then what hope can the much larger, much less nerdy, much less IT-
oriented general user population have for user education being a useful 
part of the solution?

Regards,

Nick FitzGerald