Security threats Toolkit
Story: 'Storm Worm' slithers on
Doing stuff at the ISP level is good...
Because that would stop bad security behavior right at the source.
Per example, stopping admin priv access over the Internet to well known attack ports. Like ODBC.
It seems that more and more admin priv individuals don't have the first clue about Security 101. Likely because of "functionality needs" or whatever else poor excuse offered for bad security measurements. Hence the need to stop ill advised security practices as soon as possible. Hence the need to establish that at the ISP level. As close to the source (of the problem) as possible. For sure, the established industry has demonstrated over and over again that they can't (or won't) handle it.
The idea should be: if you can't do it secure then simply don't do it. I know this is far from easy. As the "use a condom" campaign has shown (for example, it only helps you to protect you from a deadly decease), but still people do otherwise. As such I can understand why plenty of people still feel obstructed in their desires by basic IT security precaution measurements.
To overcome this problem only requires a bit more effort and a little education but nonetheless most people are too lazy, irresponsible enough or educated enough to even deal with it.
Perhaps the average IT education in general should focus more on basic IT fundamentals (like security) then on conceptual market guided leads (like, what's the most popular word processor currently).
Because too often, so far, the conceptual approach towards IT education has proven to be extremely ill advised on the most basic of IT fundamentals.
It's only whole generations we're talking about here. So I gather then that the most likely, wrong, response will be: if everyone else is doing it, why not us. Errr, because you actually make use of your brain? Or do you like repeating monkey trained behaviour?
Full Talkback thread
