Shame on you! Report: Users lazier than ever about security practices

[Brink]

Security risks are growing ever larger, but a study says people are paying less attention than ever to computer security.

The NSA is in our in-box, malware is everywhere, and Web sites are getting knocked off by hackers ever other day. So you might think us computer users would be trying to take better care of our home computers. You would be wrong.

At the @Microsoft Conversations event in Washington DC on September 12, 2013, Microsoft released its latest Microsoft Computing Safety Index (MCSI) results for worldwide consumer computer security. The results were awful.

The MCSI is a tiered security scoring system. It was first developed in a 2011 study sponsored by Microsoft's Trustworthy Computing Online Safety group. The survey contains more than 20 steps consumers can take to help protect themselves online. The more steps the user reports taking, the higher the online safety score; 100 is the highest rating possible.

Would you care to guess what the average score is in the United States?

Ready?

Read more at: Shame on you! Report shows users lazier than ever about security practices | ZDNet

 

[Lady Fitzgerald]

Pity there wasn't a link to the survey. It would have been interesting to take it to see how I'm doing.

 

[Diosoth]

Our fault?

When it's becoming harder to pick out legit antimalware programs from the fraudulent ones, when more of the good ones charge a fee, and when only one of four web browsers offers a proper Javascript blocking plugin.... plus the fact MS Windows updates lately have been buggy beyond belief and have caused severe issues for more than a few PC users, up to and including making some computers unable to boot, I'd say much of the fault lies in confusing company practices.

Is this AV software safe or is it a scam? Why does this one find these infections but the others ignore it? Should I update my Windows with these new patches if all these other people have had severe issues with those patches?

Though I'd still pin much of the blame on Microsoft for not making their OSes more secure to start with, but after the 360 RROD and cheap build incident, I guess they think it's cheaper to fix a broken thing than to make it properly from the start. But even though I've used Windows for years, I do so because it's a cheap OS and if you want to play games, you have no real choice. Linux just isn't up to Windows par and Mac is not a gaming platform.

 

[OvenMaster]

"Specifically, only 59-percent are using anti-virus software (a must on Windows systems); 40-percent are using firewalls; 47-percent are updating their operating systems; and a mere 29-percent use secured Wi-Fi for their networks."

And those who take no security precautions actually have the gall to be upset when their data is stolen, or their systems are hijacked. Do they get mad at themselves? Nooooooo, of course not.

 

[lehnerus2000]

Constant Policy/Settings Changes

Where do websites like Facebook fit into this equation?
They seem to change their policies (and Privacy settings) every few weeks.

The only possible reasons for this behaviour are:

• To bamboozle the average user, so that they can't set their accounts up correctly
• To convince them that there is no point doing it

 

[Lady Fitzgerald]

Where do websites like Facebook fit into this equation?
They seem to change their policies (and Privacy settings) every few weeks.

The only possible reasons for this behaviour are:

• To bamboozle the average user, so that they can't set their accounts up correctly
• To convince them that there is no point doing it

Or convince people not to use the site, period.

 

[x BlueRobot]

Why does everyone feel the need to blame the security of the operating system? Secuirty has been prioritized by Microsoft since Windows Vista.

90% of the time, it's the user not having safe web browsing habits and not bothering to install Windows Updates or update their virus definitions. I've had no problems at all installing any of the Windows Updates.

 

[nommy the first]

Pity there wasn't a link to the survey. It would have been interesting to take it to see how I'm doing.

I agree. Would've been a fun thing to do

When someone comes to me with security issues I always recommend them to install MSE and MBAM and run scans with both tools on a weekly basis (and a scan with ESET once every few weeks or when they think something's off). Most of the time I also tell them to put their UAC to the highest settings, completely remove Java and leave any P2P programs alone.

But I guess that most computer users are so computer illiterate they only realize that they're infected when find their data stolen and accounts compromised. Sad sad truth.


Nommy

 

[Gary]

Why is Linux much more secure than Windows? Maybe due to the fact that it has no executable files. I run Windows 7 and I am behind a Nat router , I use AIS 2014 which includes a software Firewall. Oh, I also still use SpywareBlaster so there is not much more that I can do. I have read reports that Windows 8 and 8.1 are less secure than Windows 7. So heal thyself MS!

 

[Lady Fitzgerald]

Why is Linux much more secure than Windows? Maybe due to the fact that it has no executable files...

That's the same argument Mac fanatics have been using for years and now they are finding themselves faced with increasing attacks. It has to do with the percentage of people using an OS. Until recently, OSx had been too small a percentage of users to waste time writing malware for; Windows has a much larger playing field. Another reason why Linux is more secure is it's less complex so has fewer opportunities for security holes. Also, Linux users are more knowledgeable on how to avoid infections (Linux users have to be more knowledgeable, period).

 

[Gary]

I do not believe that Linux users are any smarter than Windows users. If you take a sampling worldwide you may find that The number of Linux users is close to the number of Windows users. I ran Linux for years without any AV as it is not necessary. I cannot speak for Mac as I will never even touch one of those things. Those are fanatics. Most Linux Distros are free and quite easy to install and use. There must be some reason that the majority of servers run on Unix or Linux. I doubt that Windows is more complex.

 

[lehnerus2000]

Where do websites like Facebook fit into this equation?
They seem to change their policies (and Privacy settings) every few weeks.

The only possible reasons for this behaviour are:

• To bamboozle the average user, so that they can't set their accounts up correctly
• To convince them that there is no point doing it

Or convince people not to use the site, period.

That only works on smart people.

I do not believe that Linux users are any smarter than Windows users.

The default security position in Linux is:

"Go Away! You're not allowed to do that!"
​

You have to be more knowledgeable to use Linux, because you need to "hit" the Terminal a lot more often than you need to "hit" the Command Prompt in Windows.

I'm annoyed by how often I have to open the Terminal and type "sudo blah".
It's so tempting to just login as "root".

 

[Layback Bear]

Things of note to me.
1. We have a new group of people using some sort of computer. They are the poke and pray people. They use mostly social websites and have no idea what a secure computer, tablet or phone is. They don't want to know because they are so wise what else could they ever learn. As long as they can steal some movies, music, games and a program every now and then the computing world is perfect in their minds.
Then bang their systems gets slammed with infections and then of course they point figures at everybody else for their problem. All they did was the normal stuff like P2P for cracked movies, a torrent every now and then for a cracked program or game. You know the normal stuff.
Nobody told them to have a anti virus, firewall and a properly set up router and wifi. Why did the world keep this a secret from me? It's the worlds fault this happened to me.

2. Honest people who know that security is important but just get conned and get this and that programs by some self proclaimed great website. They are not lazy about security. They just haven't found the proper websites to guide them.
Like this great Windows 7 Forum and if I may (Bleeping Computer) (ZD NET) (The Register) and many more.

Group #1 I don't believe we or anybody can help them. They know to much to be helped.
Group #2 can be helped if we just get them to this Forum. Hopefully with the amount of members we have we can do just that. Be boastful about this Forum as often as you can and to as many as you can. We are here to help and learn.

Just my opinion.
Layback Bear.

 

[Wrend]

I'm guessing people are getting lazier on average when it comes to computer security. Reasons being: there are more and a wider variety of people using personal computer like devices, and they are using them for more social functions that require more log-ins, user IDs, and so on, so they're just using the same passwords for everything and using simple ones that can be gotten from any number of places they frequent on-line.

But yeah, no AV, no hardware/software FW (I&O), and so on, certainly won't help either.

I would tend to think that most active computer/internet users these days typically need at least three sets of unique user IDs and PWs that they occasionally change, but most likely only use one, maybe two that they never change (provided they don't forget them, that is).

The main problem as I see it is that users are either undereducated (when it comes to "digital security," including responsible computer/internet use) and/or too lazy. Is this their fault, the service/software provider's fault (for not providing enough info nor conveying the necessity), or both?

 

[jimbo45]

Hi there
I've nothing to hide and some of the things I do are probably so BORING to anybody else that I really would take pity on anybody having to monitor my emails / activities etc. - Even if they wanted to spy on what happens in my bedroom - I'm sure there are other sites where they could fulfil their sexual desires / fetishes etc much more interestingly.

As far as Bank accounts etc are concerned - the trick is also NEVER to have too much money in a SINGLE account and NEVER have AUTOMATIC payments - if you are unfortunate enough to be forced to use Direct Debit mandates then CHECK every month and CANCEL immediately any that you don't recognize --unfortunately Banks set up Direct Debits via automated processes so if someone knows your name and account number (and hence the Bank sort code) then they can set up a direct debit without you even KNOWING about it -- no signatures etc required.

This "feature" of modern Banking came out when somebody using "Satan's Bank" (Santander Bank) noticed they had a whole load of Direct debits they didn't recognize -- this was reported in the British Times paper recently. "Satan's Bank" refunded the money but explained that there was no way of stopping these Rogue Debits.

Now I really can't believe this --if you get Pestering letters and text messages from a Bank because you are USD 2 overdrawn or 30 secs late with a payment why can't they simply email you saying a DD has been requested / established - is this valid or not.

I HATE BANKS !! they got Trillions of dollars yet can't do the most simple basic thing for keeping customers accounts secure --these people are FAR worse in my book than the NSA, CIA or any other of those agencies - I think realistically we'd all be far worse off WITHOUT these guys - even if they overstep their mark at times.

Cheers
jimbo

 

[Wrend]

I've nothing to hide and some of the things I do are probably so BORING to anybody else that I really would take pity on anybody having to monitor my emails / activities etc. - Even if they wanted to spy on what happens in my bedroom - I'm sure there are other sites where they could fulfil their sexual desires / fetishes etc much more interestingly.

You may or may not have anything of particular interest, other than just using your identity, account information, and e-mail addresses, which is likely what most malware/hackers and the like are after, really. It isn't about you, it's about what they can use you to do for them.

 

[andrew129260]

It scares me how little people care about security....my better halfs mom is just like that.
She uses passwords that consist of 4 to 5 letters. No caps or nothing. When I tried to explain to her how dangerous this is, she just complains about how many stupid passwords she has to create and how she can never remember them. She hates online accounts that half the time she just creates a new one. Doesn't even try the forgot password link. Just creates a new account. Then gets frustrated when she looses everything. I have tried warning her that having weak passwords and not caring about security will affect her one day, such as money getting stolen, etc. But guess what? She says oh well the bank or whatever will protect me. It just frustrates me beyond belief. If you are not going to care, you deserve to get stuff stolen.

Especially when I offer to spend a hour with people for FREE to teach them how to secure/update their software and or online accounts. People just frustrate me to no end. Everyone's going nutz about the nsa, yet they do not seem to care if thieves can get into it? Makes no sense.
Anyway, Its not just my better halfs mom, its also like 4 other people I know as well. Scary.
People just expect everything to be done for them anymore. They don't care or want to take responsibility. I might try to use that car analogy to see if they get it. Because they do change their oil, etc.

 

[Lady Fitzgerald]

Hi there
I've nothing to hide and some of the things I do are probably so BORING to anybody else that I really would take pity on anybody having to monitor my emails / activities etc. - Even if they wanted to spy on what happens in my bedroom - I'm sure there are other sites where they could fulfil their sexual desires / fetishes etc much more interestingly.

As far as Bank accounts etc are concerned - the trick is also NEVER to have too much money in a SINGLE account and NEVER have AUTOMATIC payments - if you are unfortunate enough to be forced to use Direct Debit mandates then CHECK every month and CANCEL immediately any that you don't recognize --unfortunately Banks set up Direct Debits via automated processes so if someone knows your name and account number (and hence the Bank sort code) then they can set up a direct debit without you even KNOWING about it -- no signatures etc required.

This "feature" of modern Banking came out when somebody using "Satan's Bank" (Santander Bank) noticed they had a whole load of Direct debits they didn't recognize -- this was reported in the British Times paper recently. "Satan's Bank" refunded the money but explained that there was no way of stopping these Rogue Debits.

Now I really can't believe this --if you get Pestering letters and text messages from a Bank because you are USD 2 overdrawn or 30 secs late with a payment why can't they simply email you saying a DD has been requested / established - is this valid or not.

I HATE BANKS !! they got Trillions of dollars yet can't do the most simple basic thing for keeping customers accounts secure --these people are FAR worse in my book than the NSA, CIA or any other of those agencies - I think realistically we'd all be far worse off WITHOUT these guys - even if they overstep their mark at times.

Cheers
jimbo

I won't do business with banks. They are too greedy, offer too few services (unless there is price tag attached), and aren't as security conscious as they should be. My credit union has protection in place for all the scenarios you posted, even on debit accounts.