On 6/18/05, Heikki Toivonen <[EMAIL PROTECTED]> wrote: > Ka-Ping Yee wrote: > > The important question is not whether there is effort involved but > > whether the amount of effort is reasonable and worth it. > > The thing is, even minimal effort when the perceived threat/payback is > nil is too much. If you've never been a victim of fraud or identity > theft and are not very security conscious (I would claim most users), > then even minimal effort seems too much. Unfortunately.
Heikki, can you point to any user survey that shows that the typical user has no fear of money being stolen from their online bank account? Tyler -- The web-calculus is the union of REST and capability-based security: http://www.waterken.com/dev/Web/ _______________________________________________ Mozilla-security mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-security
