"I think this is entirely the wrong approach to personal computer security. It is unproductive to insist that those that just want to do their jobs, communicate with colleagues, or play games online have to become computer experts in order to do so."

I don't think the suggestion was that they should become experts but limit their ability to use "expert" features unless they know what they're doing; especially when considering that in general, flexibility and ease of use are inversely proportional. Allowing the user unfettered access to their computer systems and the internet without some rudimentary understanding of how they work is like handing a set of car keys to a 16 year old without giving them a driving lesson (albeit the end result would likely be less disastrous).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/262/28106#28106