Why can't you accept there is NO one-fits-all solution ? Yes, with Windows and IE on computer of almost all professions we are in one exterme (the "bad security" one). Article presents the other extreme. What we really need is to develop several compromise solutions, each a trade-off between user responsibility (like, not clicking on every attachment) and qualification on one side and morale, trust and work-home integration on other.

Note that for example there are no security danger in listening to mp3, assuming their re-encoded (if there are any bug in player, it will require non-standartly coded mp3 to exploit) and resonably secure player is used. Same is true for wallpapers. On the other hand, only approved screensavers installed by administrator should be used and if company have enough professional administration (in small companies this isn't always possible) other employees (including managment) don't need administrator rights.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/372/32779#32779