Linked by Alcibiades on Wed 4th Jan 2006 18:04 UTC
Windows Like a lot of people who have worked in the business, I find myself in conversations about computer security with people who are having problems or know people who have problems. I wrote this to save me from explaining the same thing over and over again to different people, and to save them the trouble of having to make notes as we talked. It was meant to be something you could give to a 'naive user' and have them be able to read and follow it more or less unaided, and while not being a complete guide, at least be something that made them more secure than before they got it.
Permalink for comment 82140
To read all comments associated with this story, please click here.
Great!
by biteydog on Thu 5th Jan 2006 17:53 UTC
biteydog
Member since:
2005-10-06

This is a great article. Thanks!

Is it OK to print out copies to attach to a client's Company Security Policy (which I am responsible for) ?

It will help to explain why my rules seem so harsh - no access to the hosted webservers from any Windows machine, any user account with passwords I can crack cut off until they are improved, and other such fascist measures. It will also help explain to the company's boss why I have to go round and clean up the zero-day exploit off his machine tonight (he didn't do anything particularly silly).

Reply Score: 1