Stop Trying to Fix the User (2016)

Re:Stop Trying to Fix the User (2016) by antientropic on Wednesday October 18, 2017 @06:43AM (#15498073)

> In other words, "lock the users up so they can't hurt themselves"?

No, it means that supposedly "dumb" actions by users like inserting a USB stick or opening a Word attachment shouldn't break the security of the system. (In fact, they're only "dumb" actions because our systems are designed without security in mind.) That's hardly authoritarian.

[ Parent | on HN ]

Re:Stop Trying to Fix the User (2016) by narag on Wednesday October 18, 2017 @07:33AM (#15498242)

Actually it seems exactly the opposite. Considering the users "fixable" is authoritarian, adapting to their behaviour is not.

[ Parent | on HN ]

Re:Stop Trying to Fix the User (2016) by WillReplyfFood on Wednesday October 18, 2017 @09:28AM (#15498934)

How would you sandbox such dumb "actions"? Draw a copy of everything afflicted by the actions of the thumbdrive- and kick the container, once it touches the system in a bad spot?

We are talking about tradeoffs- and the truth is, we traded security for development speed and low price, because security has a tendency to arrive very, very late in the game, the moment people want to abandon the system or concept.

[ Parent | on HN ]

Re:Stop Trying to Fix the User (2016) by Doxin on Thursday October 19, 2017 @09:31AM (#15507676)

There is exactly no reason whatsoever for executing code from an usb stick the user has just inserted.

[ Parent | on HN ]