Reply to thread

Message

<blockquote data-quote="bazang" data-source="post: 1109780" data-attributes="member: 114717">It is not about who is to blame. Whether it is the threat actor or the user, one is categorized as a threat and the other a vulnerability. As I stated multiple times, it is a multi-part problem involving threat actors and users.It is about being realistic and practical in solving the many problems. It is much easier to solve security issues on the user side than it is on the threat actor side. You should think of users (home) as attack surface. Users total in the billions. As a group they create the greatest attack surface. That attack surface is also the most easy to attack and compromise.In society, it is much less costly and much more effective to fix most security issues on the user side. Sending out law enforcement to track-down and prosecute cyber criminals is a losing strategy. The war on cyber criminals is unwinnable whereas a lot can be done on the user side to greatly increase security. People are the Number 1 problem in security and until the focus moves from solving security problems with software to solving those problems at the easiest to address source - the individual user - things will never change. People are ALWAYS the problem. ALWAYS.In the world of risk management and threat modeling, home users are categorized as an &quot;Insider Threat.&quot; That is because they are ignorant, they do not follow security best practices, they could care less about security, they make mistakes, and so on. Fixing those things cannot be done with software alone.Most home users are victims because they victimize themselves by doing things that they should not, and not doing the things that they should.</blockquote>

[QUOTE="bazang, post: 1109780, member: 114717"] It is not about who is to blame. Whether it is the threat actor or the user, one is categorized as a threat and the other a vulnerability. As I stated multiple times, it is a multi-part problem involving threat actors and users. It is about being realistic and practical in solving the many problems. It is much easier to solve security issues on the user side than it is on the threat actor side. You should think of users (home) as attack surface. Users total in the billions. As a group they create the greatest attack surface. That attack surface is also the most easy to attack and compromise. In society, it is much less costly and much more effective to fix most security issues on the user side. Sending out law enforcement to track-down and prosecute cyber criminals is a losing strategy. The war on cyber criminals is unwinnable whereas a lot can be done on the user side to greatly increase security. People are the Number 1 problem in security and until the focus moves from solving security problems with software to solving those problems at the easiest to address source - the individual user - things will never change. People are ALWAYS the problem. ALWAYS. In the world of risk management and threat modeling, home users are categorized as an "Insider Threat." That is because they are ignorant, they do not follow security best practices, they could care less about security, they make mistakes, and so on. Fixing those things cannot be done with software alone. Most home users are victims because they victimize themselves by doing things that they should not, and not doing the things that they should. [/QUOTE]

Verification