Who pays for security education? Most companies don't want to foot the bill for a single IDS sensor much less a corporate education program. Security is a cost, and THIS is what the ?front office" understands. Most of us "zealots" don't get it.

And in the small biz market it?s impossible to kn...

[ more ]  [ reply ]

We're all paying for it, and paying more as time goes on.

Home users pose a dilemma, but small and medium size businesses can manage risk with the assistance of a trained information security professional.

Some time ago, Fram ran a TV commercial for their oil filters -- a customer in an auto s...

[ more ]  [ reply ]

I'm currently toiling in the vineyard that you so well describe, using all of your suggested techniques and more.

I concur that working with small business and the home user is a niche that must be filled. However, don't bother to visit if you're seeking instant gratification in terms of $$$$.
...

[ more ]  [ reply ]

You don't need to be an educator- you need to be *educatED*!! You use FUD like "mega-patch" and expound how 2003 has 9 advisories since its release. To blindly ignore the drove of patches released for *nix and other open source products is simply irresponsible. You MUST know that they far outnumb...

[ more ]  [ reply ]

Re- Who Pays

The article already told you who pays...we all do. I was sorry to see your post to this article. I, myself, have just gotten into security. I am just starting to study for my CompTIA security+ cert. This is my first trip to Security Focus, and it shows you how dumb I am as I thou...

[ more ]  [ reply ]

Maybe ISPs should take a more active role in educating their customers about security. After all, compromised machines cause problems on their networks. Something as simple as an email or printed newsletter to customers could be helpful. So would including firewall and antivirus software in the s...

[ more ]  [ reply ]

I am also glad to read this article. The answer to Hellcat's question is, sooner or later we will all pay.

If anti-virus, UPS and backups are installed at many small businesses, all they have to do is install ZoneAlarm, BlackIce or Norton firewall, for free or at a nominal charge.

Many ISPs o...

[ more ]  [ reply ]

The altruism here is inspiring. I?m glad we have a group of highly paid security folks willing to give their time and money away for free. Just don?t go into business for yourself. And while it warms my heart to see everyone rally behind network security, the point of the article has been missed?...

[ more ]  [ reply ]

Easy,

shrike-i386-disc1.iso
shrike-i386-disc2.iso
shrike-i386-disc3.iso

Works fine, kids love it, won't get rooted, it's free...

If only everything was this easy!...

[ more ]  [ reply ]

I can't believe this was actually written. This is the most logical, TRUE, in-your-face article I have seen in a LONG time. It didn't sugar coat anything, didn't kiss anybody's butt, and certainly didn't cater to anyone (accept his own resume.. haha)

Bravo on a well pointed, well thought out, a...

[ more ]  [ reply ]

I have a 'security' mailing list to which I send Microsoft patch details [since they mostly use the Windows/IE/Office combination]. Here's a sample:

* * *
Subject: Fix for critical flaw in (Windows) Internet Explorer

Greetings,

Microsoft have released a fixed for a critical flaw in t...

[ more ]  [ reply ]

ISPs are not any better at security than MS. SWBell (my ISP) recently sent me an email saying that they would suspend my account for 'potential spamming' and spreading viruses. I run ZoneAlarm and Norton so I contacted them about this allegation. I was concerned. I found out that they had no evi...

[ more ]  [ reply ]

Well done!

For additional value added service:
Consider maintaining an up-to-date record of each client's audit of all hardware and software currently in use in their shop.

You can benefit as a businessperson by developing a relationship and keeping in touch. The benefits to your clients are...

[ more ]  [ reply ]

Let's face it, the idea that "Joe average" doesn't know squat about computer security is hardly original. Heck, just read the comments from Granneman's previous column.

However, instead of sticking with that premise Granneman decided to go on yet another anti-MS tirade. Basically the article boil...

[ more ]  [ reply ]

Although still young in the ways of the internet, computers, and all of today's technology, I feel this article to be "right-on" as far as the "geeks to the rescue" are concerned. Having taken typing class some 25+ years ago, and JUST taken it as an elective course, knowing I would probably NEVER us...

[ more ]  [ reply ]

Kudos on the article.
Yes, we'll never make money at it (helping Joe User), but that's why we keep our day jobs, and thus have the resources there to keep learning.
EDUCATION is key, no matter how you slice it.
In my experience, Joe User is simply unaware.
Community awareness sessions at your lo...

[ more ]  [ reply ]

Survival of the fittest! If you don't take the responsibility to properly secure your computer, no pitty to you.
Don't play the blame game and start blaming everyone else for your problem....

[ more ]  [ reply ]

I've found that IT professionals (I'm talking non-security pros) are as bad as the general public and these people should know better.

What it basically boils down to is that people either do not believe it will happen to them or they justify it by saying that if someone wants to get your informa...

[ more ]  [ reply ]

Personally, I don't think the problem is educating users. The problem is convincing bullheaded users who are too stuck in their ways to ever change anything and who don't _want_ to learn the right (or at least, a better) way to do things. I have many relatives and acquaintances whom this describes p...

[ more ]  [ reply ]

Than worry about MS security each and every day. That's what we have software engineers and systems administrators for. When an 18 year old kid (Parsons)can write a worm and make all of MS look ridiculous, even though the kid in question is dumb enough to lead the Feds right back to his own website,...

[ more ]  [ reply ]

Humans don't like discipline, and some necessary, recurring security activities don't loook like just discipline but B&D. Humans drink and drive, sign contracts without bothering to read them, ingest controlled substances and get themselves shot with their own guns.

The lack of attention to secu...

[ more ]  [ reply ]

ISP's serving consumers and small business should take on the same role as a corporate network department. At my company insecure protocols are blocked between the 'net and the LAN by the networking department. Egress filtering is in effect. They also block spam by a number of methods. Compromised s...

[ more ]  [ reply ]

I think the internet slows down just as much or more every time microsoft deploys one of its massive security patches through windows update as it does when the latest worm, trojan or virus sweeps the globe. So there is a multiplier to the slowdown effect that follows later...a second wave that is t...

[ more ]  [ reply ]