It's the windows way.  Users are forced to click so many useless boxes that 
they hardly read what they say and zips are the only way they know to share 
information.  The system itself makes it easy to fool the user and perversely 
makes them less likely to try alternatives.  

Sending zips is the easiest way for a windows user to share pictures and stuff 
they have.  Users get used to opening that kind of thing and worms take 
advantage of it.  What would you do if got something like that from a family 
member?  I know, you would look at it closely, maybe ask the person if they 
really sent it to you.  

They are slowly learning that they don't want to use executables but it's not 
easy for them.  The windows extension method gives them about ten different 
extensions to remember not to click and then the default settings or 200 
spaces or double extensions hide the extension or html shows you an image 
icon.  More sophisticated users can be exploited by a link to a website (such 
as their bank!) with malware that uses some kind of IE scripting hole.  
Microsoft's Office formats blur the line by mixing executable code with data.  
The lack of file permissions, executable code where it should not be and 
other design flaws are having their predicted effect.  

It's not the user's fault, ever.  They are victims of their system's 
weaknesses and the malware's authors.  

You would think that they know enough to get rid of the weaker platform, but 
the FUD about alternative platforms is so strong they are afraid do so much 
as run Knoppix.  The message, "don't trust people you don't know or work for" 
works against free software too.  


On Tuesday 20 July 2004 08:31 am, Karthik Poobalasubramanian wrote:
> http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
>ml Don't people know enough now? Why do they keep opening these
> attachments???
>
> --
> Karthik Poobalsubramanian
> [EMAIL PROTECTED]

Reply via email to