I found this article to be fundamentally correct, users should take the time to implement basic protective measures...however, in real life people will rarely do anything inconvenient unless they are forced to do so. Remember, thousands of people each year are still taken in by telephone scams even though they should know better.

People will always be people, and thus will almost always take the path of least resistance (and least security). However, we cannot expect vendors to provide 100% of the solution. I find it quite ironic that the people who cry the loudest about Microsoft not securing their products are the same ones who would complain about Microsoft putting in a mandatory update system to install updates without user intervention. Invasion of privacy! You are trying to control my computer without my consent! Microsoft is engaging in a global power grab! And other such statements.

Be careful what you are asking for when you demand vendors provide bulletproof patch management for consumer machines/OSes...you just might get it!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/236/26015#26015