ROKUS.net - Home
 Home    sdcarroll*gmail   

  Testing...

· Today on AFN-K

Ha Ha
Click for Ewa Beach, Hawaii Forecast

  Main Menu
· TrackBack Tool


  Topics
· Blogs
· Dell Servers
· Korea
· Microsoft - Servers
· Microsoft - Exchange
· Misc
· Security
· XML

· · ·All Articles· · ·

  Voice Over IP

Please click

  Last 10 Articles...
· Reading this post will save you ten bucks...
· National Treasure (2004)
· Become your own webhost.
· Mok-dong (Seoul) Immigration Office Hours
· Need to publish confidential documents? Microsoft Redaction tool may be for you!
· RSS and XML: Seoul Computer Club Presentation.
· Operations Guides
· Cool Optical Illusions
· Microsoft releases SNARF - an email relationship tool
· Link Dump / Exchange

  Search this site
Google

ROKUS.NET


This blog is no longer updated.

Since I own the domain name for a couple more years, and the hosting was paid-in-advance, it's still here. But I've moved on to Hawaii, and no longer have the need to publish all the sorts of neat stuff that made up the contents of this website.

If you've linked to me, you are invited to unlink, as your readers will no longer be presented with new content. Thanks, Steve
AOL (and all Internet) Users: Education first
Wednesday, December 29, 2004 : Stephen D. Carroll, rokus.net

Tom Liston, SANS' ISC handler on duty, writes in the Daily Diary (scroll down to "Up on My Soapbox"):
Every time I see one of the current spate of AOL television ads portraying their customers as clueless morons I want to scream. It’s not that I have some sort of deep-seated respect for the intelligence of AOL users, but rather, these ads represent, far too well, the current industry mindset, which treats computers as home appliances.

"Don’t worry about viruses and spyware," AOL explains, "we’ll take care of that for you... Plug it in, turn it on, and disengage your brain..."

Pay attention, you’re about to read something vitally important: COMPUTERS ARE NOT APPLIANCES. THEY ARE TOOLS. Tools require that their user be skilled. Tools require education and training to use. Tools require a level of involvement beyond that of an appliance because "tool use" carries with it an inherent danger.

And yet, over the past decade, the computer industry has deliberately ignored the nature of its product. It has attempted to grind off the sharp edges, to put padding on the corners, and to make a "consumer safe" appliance from these inherently dangerous tools.

The current state of security on the Internet is simply reaping the seeds we have sown.
Indeed.

I went home for Thanksgiving, and was amazed that my father, Unix Guru Extraordinaire since I was a wee lad, didn't have XP SP2 (yet), his antivirus definitions were almost a year old, there was no firewall nor spyware-fixer installed, and he hadn't locked down the box.

I was unprepared - my fix-it CD's were at home, and I spent more time than necessary downloading and installing stuff.

Lesson learned: a guy that can singlehandedly manage a huge datacenter with one eye closed needed a XP 101 crash course (no pun intended).

Another series of posts to follow about XP 101, but for starters, read Robert Scoble's 14 point article on The layers of security I use to keep criminals at bay. Excerpt:
Let's get out of the computer world. Let's talk about heirloom jewelry. My wife, Maryam, has a bit of jewelry. Does she store it here in the house? No. Why not? It's not secure enough. Where does she store it? In a safe deposit box in a bank. Let's talk about a bank's security and how many layers it has.
Explaining IT stuff using metaphors like "heirloom jewelry" is immediately grasped by non-tech folks. More to follow.

And if you think you've got nothing on your machine worth protecting - "I just surf the internet" - you might be surprised what an unprotected box is worth to the dark side of the 'net.

Update 2005.03.20: Changed link for locking down XP from DISA [.mil/.gov users only] to NSA [open to all].







Permalink |   Mail this...

AOL (and all Internet) Users: Education first | Login/Create an account | 0 Comments
Comments are owned by the poster. We aren't responsible for their content.




  Help Desk Manager    

Logos not available:
Dell Certified Storage Network Professional
Snort Certified Professional



Standard disclaimers apply: This website contains the personal opinions of the author,
and is neither endorsed nor sponsored by the United States government, its agencies,
nor anyone else, to include my employer, my coworkers, my friends, or anyone
that I haven't yet met. If you nonconcur with what's included on this site, either
(a) leave a comment, send me an email, or tell me if you see me (e.g. "feedback") or (b) don't.

These guys make me look good: