Caluser2000 wrote on 2021-06-17, 21:27:
cyclone3d wrote on 2021-06-17, 21:19:Heh.. apparently you haven't worked with some of the people I have had to work with and their systems I have had to work on. […]
Show full quote
Caluser2000 wrote on 2021-06-17, 21:00:
No body would be stupid enough to disable their firewall in the first place. It your first line of defense 🤣
Heh.. apparently you haven't worked with some of the people I have had to work with and their systems I have had to work on.
There are also people running way outdated routers which have security holes.
If everybody was smart enough to not run on an admin account then a lot of issues would maybe go away.
But people can't be bothered to have to input admin creds whenever they want to do admin related stuff. Plus even if they did, they would still end up allowing 99% of the stuff they shouldn't.
I prefer specifics. Personally I don't give a hoot that you are in IT. There is this thing called common sense . If one uses that one is not going to have many issues at all....
When I was doing mostly onsite repair for people years ago, the most common issue was computers that were chock full of viruses and malware. People will click on absolutely anything and install absolutely anything.
Ever run across a computer that has multiple useless spyware toolbars installed in the browser?
Then when the computer becomes infected and those fake AV popups start happening, those same people will click on those as well.
People also don't like to pay for anything, including anti-virus / anti-malware software. At least there is basic protection included in newer versions of Windows.
Nor do they like to let their computer take time to install updates. With Windows 10 Home, it is a great thing that updates are forced.
As far as routers, a lot of the older ones use a default password and of course the users never bother to change them or even do any real configuration besides maybe setting up the SSID. As long as somebody can get connected, they have a really good chance of being able to do whatever that want on the network.
Even now, when connecting to a new Wifi network, most SSIDs that pop up are the default ones. At least the default passwords are usually some randomly generated password which is different for every router.
Why people leave those crazy default passwords is beyond me. That is just being lazy.
Even with consistent training, usually about 30-50% of people in a corporate environment will still click on links in phishing emails. This was proven over and over again each time our security team at the last place I worked would send out fake phishing emails.
If you watch what is going on IT wise, there are still companies and governments that have issues with getting ransomware even with all the available security devices and software packages out there.
People will literally click on anything and companies and governments apparently still let regular users run on admin accounts.
Absolutely insane.