Re: Controls are ineffective without user cooperation

2004-07-17 Thread Krzysztof Adamski
On Sat, 17 Jul 2004, Stephen J. Wilcox wrote: > > On Fri, 16 Jul 2004, Christopher L. Morrow wrote: > > > > According to an AT&T sponsored survey, 78% of executives admitted to opening > > > attachments from unknown senders in the last year, 29% used their own name > > > or birthday as a "secure"

Re: Controls are ineffective without user cooperation

2004-07-17 Thread Patrick W Gilmore
On Jul 17, 2004, at 8:22 AM, Stephen J. Wilcox wrote: 1) she's overwhelmed by the amount of things that pop up at you, ask you to click on them, tell you theyre an email from microsoft etc etc Yeah, that sux. Someone should fix that. Get right on that, would you? :) In the mean time, tell her not

Re: Controls are ineffective without user cooperation

2004-07-17 Thread Peter Galbavy
Stephen J. Wilcox wrote: > 2) she "only uses the pc for web browsing, if it gets infected theres > no harm that can be done" > > So how do you argue with that? I think we have to learn to explain to the "normal" people, without scaring them too much, that their PCs are part of a big online world

Re: Controls are ineffective without user cooperation

2004-07-17 Thread Stephen J. Wilcox
On Fri, 16 Jul 2004, Christopher L. Morrow wrote: > > According to an AT&T sponsored survey, 78% of executives admitted to opening > > attachments from unknown senders in the last year, 29% used their own name > > or birthday as a "secure" password, 17% accessed the company network in a > > publi

Re: Controls are ineffective without user cooperation

2004-07-16 Thread Fergie (Paul Ferguson)
...and security, access-controls, etc. have to have a transparency and ease-of-use factor such that legitimate users don't actively attempt to bypass it themselves. :-) - ferg -- Sean Donelan <[EMAIL PROTECTED]> wrote: Donn S. Parker pointed out controls are ineffective w

Re: Controls are ineffective without user cooperation

2004-07-15 Thread Christopher L. Morrow
On Thu, 15 Jul 2004, Dave Dennis wrote: > > Tell them that every time they click on that thing, it costs $1000 > to disinfect the LAN and keep the firewall up to date. > Sean quoted some numbers sometime ago for 'average cost of virus outbreak per enterprise' I don't recall the specifics, but t

Re: Controls are ineffective without user cooperation

2004-07-15 Thread Dave Dennis
] + http://www.dmdennis.com +- On Fri, 16 Jul 2004, Christopher L. Morrow wrote: > > > On Fri, 16 Jul 2004, Sean Donelan wrote: > > > > > Donn S. Parker pointed out controls are ineffective without user > > cooperation. > > > > Acc

Re: Controls are ineffective without user cooperation

2004-07-15 Thread Christopher L. Morrow
On Fri, 16 Jul 2004, Sean Donelan wrote: > > Donn S. Parker pointed out controls are ineffective without user > cooperation. > > According to an AT&T sponsored survey, 78% of executives admitted to > opening attachments from unknown senders in the last year, 29% us

Controls are ineffective without user cooperation

2004-07-15 Thread Sean Donelan
Donn S. Parker pointed out controls are ineffective without user cooperation. According to an AT&T sponsored survey, 78% of executives admitted to opening attachments from unknown senders in the last year, 29% used their own name or birthday as a "secure" password, 17% access