9 ms·
Part of the reason to have a list like this is so people can pick up good security practices without having to think about and understand possible threat vector
by booi 5y ago
Part of the reason to have a list like this is so people can pick up good security practices without having to think about and understand possible threat vectors.
For example, it's unlikely a lay person would even know that they should be checking that they're looking at https versions of sites and they probably shouldn't have to know that. We as the tech community could easily just recommend them the HTTPS everywhere extension and call it a day.
- djrogers 5y agoHard disagree here - without knowing the why, people will inevitably lapse. Your example is a great one - if a lay person saw a website that wouldn't load with the extension you recommended them, they'd just turn it off if they didn't know why it mattered.
- billdietrich1 5y agoNo, I disagree. Most people are so baffled by computers that they don't want to know "why" or "how things work". They just want to be told what to do, or better still they just want you to make it work. So just tell them "here, do backups THIS way, use THIS password manager, I've installed an ad/script-blocker in your browser, now you're in better shape".