You can't hurt other people with a VCR or a drill (at least typically). We do require training (or at least proof of competence) for things like cars and heavy equipment where you can hurt someone else. If bad computer security only hurt the user we wouldn't even be having this debate, but your bad computer security habits can cause me problems.

We don't let you drive a car before you prove at least a minimal competence (theoretically at least, the actual implementation by DMV is another debate) and we don't let you continue driving if you insist on ignoring traffic laws or driving recklessly enough to put others at risk. Why shouldn't we treat users of network-connected computers the same way?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/394/33399#33399