OSNews

To clarify my stance from my previous post regarding "Educating users" -- if one can improve security by educating users, one should educate users, if one can improve security without needing to educate users, one should do that as well. Of course, it is better only the latter case to occur -- since then experts won't have to deal with users, but unfortunately, often one has if one wants better security.
So, in other words, the stance of the author of the article that the our strategy should not be to educate users, because it is dumb, is clearly, simplistic and dumb itself. In any case, there cannot be ultimate security if users are not educated -- how is knowing not to click on an Anna Kournikova virus-infected e-mail not a social problem, and hacking is a social problem? By solely technical means, one can make it harder for users to run the attachment, but there is a ceiling that is hit at one moment and from that point, one can progress solely through educating users. Of course, that does not mean that one will be successful at educating users, but that is another case, and there are various types of training and learning that I do not think have been applied to people and may turn out to bear good results if the strategy is to educate users AS WELL AS do everything technically possible to solve the security problems.