Security expert: User education is pointless

[Gizmo]

"Forget about teaching computer users how to be safe online.

Users are often called the weakest link in computer security. They can't select secure passwords, and they write down passwords and give them out to strangers in exchange for treats. They use old or outdated security software, can't spell the word "phishing," and click on all links that arrive in e-mail or instant messages, and all that appear on the Web. "

Read more on the Front Page:
http://www.aoaforums.com/frontpage/content/view/1290/2/

[madcatmk3]

Its not even half the stuff. phising is a big one. But the real problem is useres go out sreaching for things like porn. That really destroyes computers. WIth my computer hooked upto the 42" plasma and 600w surround most of the time the first queston someone will ask me is do you look at porn on it

[Gizmo]

Originally Posted by madcatmk3

do you look at porn on it

It's a guy thing.

[Chernobyl]

I agree with a lot of what he says.
Some rules do need to be taught and made part of strictly enforced company policy.
As things are, the tools at hand cannot keep systems fully secure so users need to know what they shouldnt do spelt out in plain English.
People learn fast if they could lose their job or suffer a penalty

[madcatmk3]

1. Dont use IE.
2. WHen it says download and upzip to watch you have to refrain.

[Chernobyl]

That brings up a good point.
I download many TV series off the web (I like HD ) and they have become a target for virii.
I downloaded a new episode of Lost some time ago which was zipped up.

After it downloaded, I virus scanned and it was given a clean bill of health
When I opened it, a virus installed!! (Avast picked it up)
I cant remember what it was but it was cleaned off smartish.

I now only download videos that are not zipped up, just raw video files.

[Gizmo]

There are certain classes of vulns that can be exploited using specially formatted videos or images.

[Chernobyl]

Hopefully those virii can be scanned and found if the videos arent zipped up.

I've found numerous infected zips/rars that contain a virus but arent detected when scanned, only when opened.
They werent password protected zips/rars.

[robbie]

Originally Posted by madcatmk3

Its not even half the stuff. phising is a big one. But the real problem is useres go out sreaching for things like porn. That really destroyes computers. WIth my computer hooked upto the 42" plasma and 600w surround most of the time the first queston someone will ask me is do you look at porn on it

And your answer is HELL YA!!!!

[madcatmk3]

Originally Posted by robbie

And your answer is HELL YA!!!!

haha no, no way Im screwing up my show computer just for that. Thats what my girlfriend halps me with.