Reply to thread

Message

<blockquote data-quote="509322" data-source="post: 779015">My statements aren&#039;t some made up make-believe opinion. They&#039;re based upon field observations and the data gathered there. The bottom line is that the vast majority of users are ill-equipped to handle the digital age. Plus, the digital world is not autonomous; it requires human to operate the devices. So the user is naturally one of the fundamental problems. And what I state is confirmed by multiple studies that don&#039;t focus solely upon the Eurozone and North American regions. Ok, if your basis of judging user IT knowledge is white college kids in the U.S or Europe., then your data is going to be highly skewed. Move your focus to middle aged users who don&#039;t want to be bothered with anything IT other than how to get the device on and running and you get a whole different perspective. The data and analysis results are highly dependent upon the demographic.Any solution that does not first start with the user is a highly flawed solution... and the current state of IT security is proof.Bypassing PoSh Execution Policy is trivial. Besides, the real threat is not scripts run from disk but LOL vectors.And, yes, macros are disabled but the uninformed user will enable them by social engineering.Both are terrible security by design.</blockquote>

[QUOTE="509322, post: 779015"] My statements aren't some made up make-believe opinion. They're based upon field observations and the data gathered there. The bottom line is that the vast majority of users are ill-equipped to handle the digital age. Plus, the digital world is not autonomous; it requires human to operate the devices. So the user is naturally one of the fundamental problems. And what I state is confirmed by multiple studies that don't focus solely upon the Eurozone and North American regions. Ok, if your basis of judging user IT knowledge is white college kids in the U.S or Europe., then your data is going to be highly skewed. Move your focus to middle aged users who don't want to be bothered with anything IT other than how to get the device on and running and you get a whole different perspective. The data and analysis results are highly dependent upon the demographic. Any solution that does not first start with the user is a highly flawed solution... and the current state of IT security is proof. Bypassing PoSh Execution Policy is trivial. Besides, the real threat is not scripts run from disk but LOL vectors. And, yes, macros are disabled but the uninformed user will enable them by social engineering. Both are terrible security by design. [/QUOTE]

Verification