Sorry, I agree with most of your points, but certainly not the first. You don't attend mandatory training classes when you purchase other goods like VCRs, drills, or abrasive chemicals. You don't even attend training classes before you have a kid.

Security needs to become invisible. You, the end-user, shouldn't need to worry about patching your systems, upgrading your anti-virus, etc. This should all be part and parcel of the total cost of owning a computer, and should come pre-installed, invisible, and just plain working. Microsoft has done a (somewhat) good job in their auto-updates, but why is anti-[virus|spyware] still an "add-on"? These need to become integrated. I don't want to get a $9.99/year charge for these updates. These should be free. I don't pay $9.99/year to keep my keyboard working.

Trying to teach security to the unwashed masses is a Bad Idea. Spend that money fixing the system and the process so that they don't need to worry about it.

That's my take, anyway.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/394/33391#33391