Help
The follow extracts are me trying to explain the concept of internet security:
Mum: 'But we already have a virus checker'
Me: 'When was the last time you actually used it or updated it?'
Mum: 'Oh...'
Me: 'Dad how do you manage your passwords'
Dad: 'That's easy I just choose ones I can remember'
Me: 'Give me an example... do you use mixed upper and lower case, numbers and punctuation?'
Dad: 'Gods no I'd never remember it, I use the same one for everything'
Me: *Sigh* (that includes his logins and credit card details etc...)
Mum: 'But why do we need a firewall?'
Dad: '*Sigh* the one we have at work is a waste of time I can't access the bank online the firewall blocks it'
Mum: 'We've managed perfectly well without one before'
Me: 'But how on earth can you tell who is accessing the PC or stop someone breaking into it?'
And the conversation goes on... and gets more worrying etc etc
Here is what I have learnt about how the average person uses thier PC:
Most use Win9x (those that use an NT based OS, don't use any of its security features NTFS, restricted accounts, passwords etc).
Most don't patch thier OS.
Most don't use AV/Firewalls/Ad-ware or trojan scanners (unless forced to) those that do don't configure them properly or keep them upto date.
Most use the same plain lower case password for every website and login prompt they come to (regardless of what information that site requests).
Most aren't aware of alternatives to builtin apps like IE and Outlook Express etc.. (and use the MS ones in thier default unpatched configurations for everything).
When faced with an email with a dodgy subject line or a program sent by a 'friend' say 'Ohh I wonder what this is... lets open it and find out!'
And many people I've spoken to never bother to backup any of thier files or progams on a regular bases (if at all).
The results from speaking with both family and friends are alarming, the attitude seems to be 'well all that kinda stuff only happens to other people!'... I think people really need to wake up and take notice of internet security... or learn the hard way. (I know I did!)
. Just because they don't sit down with pirated software all night and on weekends to learn a device that they will only use to get email doesn't mean they shouldn't have it. If security is an issue, then show them what they need to know. As for me, I am giving my mother a PC with only Debian and fluxbox, and her flux menu will only have the things that I want her to use. There we go, simple as that. No biggie. Oh, and the best part is that she can't download any of that stupid spyware crap because it promises pictures of kittens or something else like that. And if need be, I can just have her go online, hit my webpage so I can see her IP, then ssh in and update her system when needed without her knowing what is going on, and no need for reboot afterward (unless I am setting up a kernel patch, which would be rare).
