Current mood:	optimistic
Entry tags:	geek, ideas, officelive, perspective

Schneier on Security: Proof that Employees Don't Care About Security

I say ditto to the quoted portions below.  Read the whole post here.  And, good or bad, that leaves lots of work for me.

"...Employees care about security; they just don't understand it. Computer and network security is complicated and confusing, and unless you're technologically inclined, you're just not going to have an intuitive feel for what's appropriate and what's a security risk. Even worse, technology changes quickly, and any security intuition an employee has is likely to be out of date within a short time....

...If I go downstairs and try to repair the heating system in my home, I'm likely to break all sorts of safety rules -- and probably the system and myself in the process. I have no experience in that sort of thing, and honestly, there's no point trying to educate me. But my home heating system works fine without my having to learn anything about it. I know how to set my thermostat, and to call a professional if something goes wrong.

Computers need to work more like that."

I also think that things like Office Live are really going to help us all get there.  I know I've put a lot of work into a lot of systems, but it should not have to take this much work.  I want to see people enjoying and using technology, not loathing it - for whatever reasons.