Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Human Nature vs. Security
Daniel Hanson, 2004-03-29

Social engineering in the latest crop of viruses has people jumping through hoops to open malicious attachments. How do we change the pattern?

Comments Mode:
Human Nature vs. Security 2004-03-30
Anonymous
Human Nature vs. Security 2004-03-30
IT Professional (2 replies)
Human Nature vs. Security 2004-03-31
Anonymous
Human Nature vs. Security 2004-04-05
Anonymous (1 replies)
Human Nature vs. Security 2004-04-07
Anonymous
Human Nature vs. Security 2004-03-30
Mene Tekel (1 replies)
Human Nature vs. Security 2004-04-06
Anonymous (1 replies)
Human Nature vs. Security 2004-04-07
Anonymous
Human Nature vs. Security 2004-03-30
Simonis
Human Nature vs. Security 2004-03-30
Anonymous
Human ignorance vs. security 2004-03-30
F. Obfusco
Human Nature vs. Security 2004-03-30
Yvan Boily (1 replies)
Human Nature vs. Security 2004-04-02
Anonymous
Human Nature vs. Security 2004-03-31
jaywalker (3 replies)
Human Nature vs. Security 2004-04-01
Brainclots (1 replies)
Human Nature vs. Security 2004-04-04
Mene Tekel
Human Nature vs. Security 2004-04-01
IT Professional (1 replies)
Human Nature vs. Security 2004-04-02
Anonymous
Human Nature vs. Security 2004-04-01
Anonymous
Human Nature vs. Security 2004-03-31
Anonymous (1 replies)
Human Nature vs. Security 2004-04-01
The Suite (1 replies)
Human Nature vs. Security 2004-04-02
Anonymous
Human Nature vs. Security 2004-04-01
Chris
Human Nature vs. Security 2004-04-01
Educational Netowrk admin
Human Nature vs. Security 2004-04-01
KB

Normal users and e-mail worms remind me of the Simsons cartoon where Bart keeps touching the toaster, pulling his finger back and saying "Ouch" only to reach out and touch the toaster again with the same finger.

There was a comment earlier about the "not my fault" ignorant arguement in Western culture these days. I just have this to say: Its my fault, as the security architect, that you clicked on the non-work related attachment from someone you don't know in an unsigned e-mail containing nothing personal because the perimiter software should have caught it. It is also my fault that you are getting 15 spams a day even though the other three hundred are filtered out. Its definitely not your fault for registering your work e-mail with an online non-work related game or mailing list.

I do believe that this thinking is on the same level as a 4-5 year old. (actually my 4 year old has a better concept of personal responsibility than this)... I also believe that classifies as "Moron" when applied to a 40 year old. Sugar coat it as you will, make it politically correct, water it down so as to not "offend" someone but the facts remain. A duck is a duck no matter how its cooked.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/231/25677#25677
Human Nature vs. Security 2004-04-05
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus