Personally, I don't think the problem is educating users. The problem is convincing bullheaded users who are too stuck in their ways to ever change anything and who don't _want_ to learn the right (or at least, a better) way to do things. I have many relatives and acquaintances whom this describes perfectly. Seeing users not follow best practices is frustrating, true. But being shunned, screamed at, and otherwise abused when meekly suggesting that there might be a better way to do something is much, much worse.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/193/23402#23402