Re: OT: Educating users about Security

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Siri Amrit Kaur
Date:  
To: plug-discuss
Subject: Re: OT: Educating users about Security
On Saturday 13 November 2004 10:47 am, Victor Odhner kindly wrote:
> Hi, Siri.
>
> > So, "how do you solve a problem like Maria?"
>
> In short, if you aren't in the position to help
> set up their computer FOR THEM, or if they are
> not compliant enough to simply OBEY your COMMAND
> to install ZoneAlarm and not click on email
> attachments, you will not be able to help these
> people. More suggestions below.
>
> The real problems are:
>
> 1. People really *are* too busy.  Life keeps us
>    very busy, and to get people to actually take
>    time for something that is outside their sphere
>    of concern is virtually impossible, until they
>    get bit.  Hey, you see this among techies,
>    don't you?  I've been working with computers
>    for 35 years, and am the local expert on lots
>    of things; but for 35% of the decisions I make,
>    I have to rely on someone else who has the
>    cookbook or specializes in some area to help me
>    make the right decision.  For another example,
>    we tend to make our political decisions based
>    largely on the circle of friends (and/or web
>    sites, publications, etc) from which we gather
>    our information.  People are highly social
>    animals, and DO rely on one another for
>    guidance.  So you need to leverage this with
>    the "Marias" in your world:  Call in the
>    professional or social standing you have built
>    with them, and simply demand that they let you
>    influence them in these areas.

>
> 2. People do not act on what they know, but on
>    what they want.  If they are so needy for "input"
>    that they will click on every attachment, or if
>    they are determined to surf pr0n sites, or if
>    they are so rigidly individualistic that they
>    will not accept guidance from those who know,
>    then they *will* be hurt.  We can only sorrow
>    for them, and keep the lines open in case they
>    have a "learning experience" and become a little
>    more malleable.

>
> People learn from experience. They do lock their
> house and their car, don't they? Maybe not their
> car, because they don't believe anyone would want
> that either, or don't believe how quickly someone
> can drive it away without a key. Maybe not their
> house, because they've never been broken into.
>
> I'm a computer dude, but when my wife's brother in
> law visits, often bringing some pass-me-down
> hardware for my wife's computer, he makes sure that
> all her IE updates are installed. But *he* doesn't
> understand why she and I both do all our browsing
> with Mozilla. See how it goes?
>
> If they gripe about pop-ups, definitely sell them
> FireFox. That was a good opportunity with my
> daughter in law (she was *so* glad to be free of
> the pop-ups!), and with my daughter (her kids were
> getting to see some really nasty messages).
>
> Siri, people are (let me say this kindly) *stupid*.
> I don't exempt myself from this. We all have blind
> spots, we all choose what to pay attention to, and
> what to simply ignore or rely on friends for. That
> last one is where you have a shot at doing some good.
>
> So, pick your battles. Just try to get across the
> simple phrase, "the Internet is a two-way street
> and you need to lock your door". If they run
> Windows, INSIST that they install ZoneAlarm and only
> OK connections that they have initiated; and so on.
>
> We have only so much time to live our lives.
> Learn a little philosphy from this old guy, and
> just do your best. ;-)
>
> Vic


Thanks for everybody's input. I'll try Dennis' suggestion for the Google
search. I've tried other searches of similar nature, hoping to find something
short and scary to knock some sense into them. I've talked to them about
using different browsers like firefox. I get in return "What's a
browser?" (bangs head against the wall.)

I'd say let them learn the hard way, but it's impacted me. Their internet
practices at work were so bad, their computers so infested, that my boss took
the extreme step of taking us ALL off the internet just to protect the
databases. He felt he couldn't secure the WinXP Home Edition desktops we have
there, no matter how much security software he put on. Their boxes were
infested with spyware. My computer was the only one that was totally clean
because I used Firefox and Opera, never installed Outlook Express or Real
Player, turned off Java, installed a hosts file, etc. but I got taken off the
internet, too.

He had me set up one old (300 MHz) computer with Slackware for all five of us
to use for internet and mail. It's a terrible solution; it's put us back into
the stone age. We're running KDE because they couldn't get the hang of the
lighter window managers. Everybody is under one guest account. We don't save
any sensitive data on it. I'm going to try giving people separate accounts to
see if they can handle logins, but so far, I've had to log them into the
guest account because they can't even type in a password without screwing up!
I'm not kidding!

I made the system as lean as possible but it's slow, even with unneeded
services not installed or turned off. They blame Linux for the slowness, not
the barely sufficient RAM. They blame Linux when Cox has DNS resolution
problems, too. They blame ME for the Linux. They HATE Linux. They hate having
to learn to do things differently, using different browsers, having to login
and out, getting their email through Squirrel Mail instead of Outlook
Express, fighting with Open Office when it won't open the Word Perfect
documents that one client insists on sending. (My boss and I tried numerous
times to teach that client how to send in .rtf, but she's too dumb to learn
*sigh*.) I thought they would like Linux, but they hate it.

We need a way to separate the LAN from the internet in Windows, but my boss
doesn't know how to do that. He says it's impossible with WinXP Home Edition.
We could try to run the Windows apps we need under Linux but I don't know how
to set things up for that. Haven't got a clue how to use Wine or other
emulators, or how to network Linux in a LAN. I don't know squat about
networking. He won't pay a Linux/Windows consultant to tell us how to set
things up sanely.

I love these people like family, but I'm getting tired of them blaming ME and
Linux for their misery. I feel I should be blaming THEM for being so
willfully and deliberately stupid with their computers that it came to this.

So, that's my rant. Thanks for listening.

>
> Siri Amrit Kaur wrote:
> > How do you explain the security risks of viruses,
> >
> > worms, spyware, etc. to
> >
> > people who need to take security seriously, but have NO
> >
> > technical background and don't want to believe that:
> >
> > 1. Their home computers are vulnerable.
> > 2. They have anything on their computer that anybody would want.
> > 3. Bad guys would ever crack "their" computer
> > 4. Having their computer used for Distributed Denial of Service
> >
> > attacks can't be a big deal.
> >
> > 5. Keystroke loggers really can trace their sensitive data.
> > 6. Their computer could be used as a porn server
> > I've tried to explain to them ... "But I don't care." Their level
> >
> > of denial and deliberate naivete is dumbfounding!
> >
> > So, "how do you solve a problem like Maria?"
>
> ---------------------------------------------------
> PLUG-discuss mailing list -
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss