Lack of Security

[ST0RMCHASER]

This is just a hypothetical question for the IT's on the Forum.
I have come across several people, mostly consumers that just don't take security for their computers seriously. When I mention firewalls programs to them, they act like they are immune to attack, because after all their pc has nothing on it that a attacker could possibly need or want. I have explained to them how their computers can still be used, but I feel it falls on deaf ears. Any suggestions on handling this type of situation?

 

[hnd]

If those people will not hear to Security Considerations they will have to make their own bad experiences. I think that ist the only way to teach security.


hnd
hasso55@yahoo.com

 

[RiezalR]

Simulate a worst case scenario for them. Make it a real-time scenario, that is to show them how bad it can be if they do not have security and what are the consequences. After all, this is one the objectives of penetration testing. I've done a few of this on some webservers that belong to my friends. After that, they decided to implement some sort of security measure. Maybe you could try that.

 

[ironpawz]

Many are unlikely to ever listen. At least talk them into backing up their data. Most people will do that if nothing else.

You could try demonstrating how simple some personal firewalls are (tiny personal firewall is pretty simple but some of the learning questions it asks will confuse them).

Most will at least run virus software. You can use that to demonstrate they care something for their system. Explain the new generation of viruses comes at you from cyberspace not in emails or files fun on the local machine (which they probably do lots of also).

People are not after them anymore the viruses use someone else to automoatically get them and once infected they use them to infect others. Talk the them about the worms that take a random email from their system and send it to everyone (like their wife) from their contacts. This type of viruse may not only arrive by email.

Also at least make sure they don't have Personal Web Server running by default (at least that will save quite a few).