Reply to thread

Message

<blockquote data-quote="509322" data-source="post: 770500">That&#039;s all on the user. The user is entirely the problem. People will want to argue some kind of counter point, but it is an exercise in futility.A user that uses a product incorrectly is all their fault. It is their responsbility to figure out how to use it properly and use it properly every single time. That&#039;s why people fail 90 out of 100 times with warranty claims... because they misused the product which immediately voided the warranty.They&#039;re called application and OS exploits. All you need is a single type for your system to be pwned. They&#039;re are two types, zero-day and known. True zero days with remote code execution are worth a lot of money. Enough money that the ones that find it will probably sell it instead of trying to scale it up and make it work is some hoakee, end-user campaign that will net them less money. The known ones get the systems that are unpatched or running unpatched softs. Exploits target the most widely distributed softs out there. The popular ones.You don&#039;t have to be a high risk user for your system to be pwned. But the reality is that - if you are a safe user - the likelihood of infection is low.And in truth, you can run default Windows security and never get infected.It all comes down to what the user wants.And if a user doesn&#039;t know, well then it&#039;s all on them. That&#039;s life bro. That applies to so many things in life. You are an adult, it is your responsibility to figure it out. IT security is no different.Default deny - the kind of default deny that I am talking about - stops just about everything. It is not difficult to learn nor difficult to use. It is not the inconvenience that some people make it out to be. The person is inherent to default deny. There are millions of people who make default deny work for them and they go about their stuff without obsessing.</blockquote>

[QUOTE="509322, post: 770500"] That's all on the user. The user is entirely the problem. People will want to argue some kind of counter point, but it is an exercise in futility. A user that uses a product incorrectly is all their fault. It is their responsbility to figure out how to use it properly and use it properly every single time. That's why people fail 90 out of 100 times with warranty claims... because they misused the product which immediately voided the warranty. They're called application and OS exploits. All you need is a single type for your system to be pwned. They're are two types, zero-day and known. True zero days with remote code execution are worth a lot of money. Enough money that the ones that find it will probably sell it instead of trying to scale it up and make it work is some hoakee, end-user campaign that will net them less money. The known ones get the systems that are unpatched or running unpatched softs. Exploits target the most widely distributed softs out there. The popular ones. You don't have to be a high risk user for your system to be pwned. But the reality is that - if you are a safe user - the likelihood of infection is low. And in truth, you can run default Windows security and never get infected. It all comes down to what the user wants. And if a user doesn't know, well then it's all on them. That's life bro. That applies to so many things in life. You are an adult, it is your responsibility to figure it out. IT security is no different. Default deny - the kind of default deny that I am talking about - stops just about everything. It is not difficult to learn nor difficult to use. It is not the inconvenience that some people make it out to be. The person is inherent to default deny. There are millions of people who make default deny work for them and they go about their stuff without obsessing. [/QUOTE]

Verification