Beng Hacks: October 2007

Monday, October 08, 2007

It's the user ffs!

My uncle was at a recent IT security show, and he attended a few talks at this IT security show I think he said Govware (GovernmentWare?). Anyway he said he attended a few talks about IT security and alot of the stuff were state-of-the-art, incuding things like biometric security and other security toy and ideas.

But he at the same time while impressed was complaining that the people attending the sessions were mostly ppl who are high-level or for ppl who are system admin. He was saying that technology is moving so fast that IT professionals are finding it hard to keep up much less be fluent.

So he said, "if we professionals cannot keep up, how can normal user use it properly? Where is the user training and effective understanding by them?"

I think this is the exact problem facing the world today. Botnets and trojan and virus still succeed because no matter how powerful security systems are, there will be a dumb user who will ignore these fancy technology and do things that are convenient and easy for him. For example, writing down passwords on a PostIt note pasted on his LCD cuz the SysAd enforced a password policy that insist 8 letters and at least 2 non-alphabet.

Most of the viruses and trojans in the wild today work not cuz they hack and break into the system but cuz ppl download files like cracks and sex passwords which allow the hackers to break into their system easily. No break is not the correct word cuz they didn't break in, you let them in LOL...

So how to solve this problem? I think cannot be solved. It's like how pa game today is almost normal today. Because gamers are growing up. Soon parents and their children will play game together and frag their foes together. So in time, today's generation of IT experts, ppl who YouTube, Meebo, Facebook, use firewalls all the time, understand the threat, will grow up and understand more.

THat is my wish lah. Cuz I think the world is so big and so many ppl using INternet, the trojans and viruses will still work against the idiot cuz the idiot will always exist.

So to the idiot out there, I thank you. =)