3 ms·
Microsoft has tried to do security in the way you have mentioned. It only pisses pleb users off, and power users don't really need it. The real solution is not
by debacle 12y ago
Microsoft has tried to do security in the way you have mentioned. It only pisses pleb users off, and power users don't really need it.
The real solution is not in prevention but in recovery. If the recovery option is easy and fast, then prevention doesn't really matter - detection and recovery will be key.
- growupkids 12y agoHow would you recover if the intent of the attack was to ex filtrate something, say payment information?
- debacle 12y agoI only meant for my statement to apply to consumer devices. Servers are a completely different matter, and IMHO you should never store that kind of data on a laptop or desktop. That's what VPNs are for.
- snowwrestler 12y agoThe financial system is great at recovering from that sort of thing. 1) Transactions have to reconcile somewhere--monitor at that point for unexpected activity. 2) Use insurance policies to pay back losses due to theft. Payment info is among the data I worry about the least; I check my card statements every month, and flag any unknown activity. Under my card and bank agreements, I'm not liable for losses if I catch them within the defined window (30-60 days depending on card), even if I did something stupid like set a weak password or lose my own wallet.