Keith Dowell wrote:
> I made this point on a mimedefang list. Some people didn't really
> like it.

I like your point but I have some minor points of interest.

>
> Computers are too complicated for people to be responsible some said.
>
> So I tried equating it to maintaining your car in that, if your car
> smokes and causes pollution - it is NOT the manufacturers
> responsibility to come fix your car. It's your responsibility to take
> it to the nearest mechanic. If it smokes too much the police might
> just have to remove you from the road for other peoples safety.

Vehicles come with manuals which explain when to service your vehicle.  PC's
do not come with such reading material.

Vehicles show signs of problems, by noises or not working at all.
Zombie infected computers do not show warning signs of problems, so how are
people supposed to know something is wrong?

I like your analogy but I'm on the other side of the fence.
Which is more likely to happen, 1,000,000 users learn about security or 1
Network Admin Department makes a change to protect all 1,000,000 customers.

As someone pointed out before, I am all for allowing those who want full
access to have full access.

I just feel those who do not know better should be protected.


> What I got in return to that was - Yeah sure, but doesn't relate. Auto
> manufacturers don't put out buggy cars like microsoft puts out buggy
> software.

Sure they do, All Auto manufactures produce problematic vehicles, and when
they discover the problem they send out a "Recall"  If the problem is severe
they send out an emergency recall.

>
> Hmm... good point - but doesn't microsoft put out these things called
> patches? Is it not the users responsibility to maintain their software
> (vehicle) but obtaining these patches (tune up).

Auto manufactures have something called "Recalls" when a serious problem is
found in their vehicle, the dealer sends a message to bring the car in for
service.
The majority of the time the problem is fixed for free.  It's still the
responsibilty of the user to follow up and get the fix applied.

PC's do not have recalls.
If PC's had something like this, we would not have this problem.
Imagine if Dell called you and said, "Keith, we found a serious problem in
that new server we just sold you, please apply Updates ASAP".
That might make a difference but at the cost of more people working for the
computer manufactures.
Sure we have windows update, but how many home users go to that site?

>
> I don't see how this doesn't equate. It's the same friggin thing. If
> you are going to put yourself on the internet then you should be held
> accountable for what happens to your computer.

I agree the user should be more responsible, but this will never happen.  We
are more likely to change the providers ways before changing the ways of
millions of people across the world.

> It isn't
> microsoft/linux 's responsibility to educate users. It's their own
> responsibility to educate themselves or suffer the consequences. You
> have to think of this in terms of the dsl/cable connections. Everyone
> is now "always on" which in essence makes them like a little open
> node on the internet. The government is NOT responsible, NOR the ISP,

One of the biggest points I am trying to make is that many large ISPs are
receiving 100s or 1000s of abuse reports about this problem and we don't see
things getting any better.  If they take a stand a set a good example for
all the smaller ISP's we would be in better shape.

I'm expecting flame for this but I'm thinking a majority of the spam problem
we have today is the fault of the end user who does not secure their system.
I can't expect every Cable / DSL customer to learn about security and secure
their systems but I am hoping the providers will see this problem from the
other side of the fense.  Be more pro-active.


> NOR the software manufacturer for maintaining safety of these little
> nodes. I'm sorry, but I will not see this any other way. The
> government doesn't know their head from their ass as far as the
> internet, the ISP should only be responsible for shutting the nodes
> down originating from their own network,

But they DO not Take responsiblity at least the Large ones do not.
That's the whole purpose of my rant.


> and the software
> manufacturers should make patches available when they fix bugs. The
> USER is/SHOULD BE held responsible to secure, maintain, upgrade, etc
> etc their little node. Too complicated? Then they don't need to be on
> the net all the time (or period for that matter as far as I'm
> concerned). Or they need to hire a mechanic "PC-TECH".

I find it easier to go after 1 ISP than 1 million ignorant users.

> All this really becomes is a whole debate of how responsible should a
> user be?

If the END users were responsible, this problem would not exist and spammers
would most likely try to find open relays like they used to in the 90s.
That's why I'm bringing up the topic, the majority of end users are not
educated on the topic of security and if you check their ISP's website you
are unlikely to find information to help you.


<snip>
>
> If you're stupid and don't read the "owners manual" for your car,
> never change the oil, wear your tires bald, never change the
> windshield wipers, and people force you to quit driving the vehicle,
> it's your OWN fault.

Correct but what if your manual did not explain that you need to update
(tuneup) your PC to keep it safe.
So if my manual doesn't say to do this, how am I supposed to know?

>
> If you don't RTFM, do a little research, (my god -  it is NOT THAT
> FRIGGIN HARD)

If it was not why don't the millions of people do it?

> get the basics of owning a computer, and get your
> little node shut down because your a friggin idiot spewing crap out
> on the net, because your computers infected, because it got hacked,
> because you had no protection, etc etc, yadda, yadda - then it's your
> OWN fault.

Can you help to bring all these people up on lawsuit?

>
> Think logically here folks.
>

I try to!




-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to