[Hidden-tech] Security: Mac vs. Windows is no longer an argument

[Andy Klapper]

I have my security cranked up quite a bit so it is possible to prevent this
stuff from happening without permission.  The problem is most of these
attacks are more social engineering then software engineering.  My wife will
still install little widgets with pretty fish swimming in them, 'cause she
likes them.  Who the heck knows what comes along with the fish, sharks?

At least she doesn't double click on attachments from unknown people saying
"click on this for a special Christmas card just for you!"  You'd be
surprised how many people do that.  (And how many forget or won't admit that
they did a week later when their computer starts acting strange).


Andy.

-----Original Message-----
From: hidden-discuss-bounces at lists.hidden-tech.net
[mailto:hidden-discuss-bounces at lists.hidden-tech.net] On Behalf Of Roger
Williams
Sent: Monday, December 08, 2008 4:50 PM
To: roy at net-vantage.com
Cc: hidden-discuss at lists.hidden-tech.net
Subject: Re: [Hidden-tech] Security: Mac vs. Windows is no longer an
argument

   ** Be sure to fill out the survey/skills inventory in the member's area.
   ** If you did, we all thank you.


>>>>> RA Cohen <roy at net-vantage.com> writes:

  > someday, coming to you real soon, will be that email attachment you
  > inadvertently opened that turns your machine into a zombie
  > spam-thrower.

After 20 years managing networks and designing network equipment, I have to
confess that I'm still bewildered by this.  Why on earth would _anyone_
design a
mail client or desktop manager so that it automatically executes code after
extracting it from an attachment -- and why on earth would any user _permit_
this
behaviour once he knows that his computer is configured that way?!

>From the feedback I get from Windows users, I have to assume that they're
powerless to stop their computer from automatically executing code that it
receives from unknown and untrusted sources.  I know that my Mac, Linux, and
Solaris installations don't do that.

-- 
Roger Williams <roger at qux.com>
Chief Technical Officer, Qux Corporation
433 West Street, Suite 8, Amherst, MA 01002, USA
Tel +1 413 253-6400 * Fax +1 508 302-0230 * GSM +1 508 287-1420
_______________________________________________
Hidden-discuss mailing list - home page: http://www.hidden-tech.net
Hidden-discuss at lists.hidden-tech.net

You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members   
page on the Hidden Tech Web site.
http://www.hidden-tech.net/members