Computer security is a bit like climate change. Everyone knows it’s a problem, but it doesn’t affect them. I just did an online training course today about what not to do with your computer. One question was so dumbfoundingly out-of-date that it is worth repeating. It asked what I should do if a black dot appeared on my screen, a clear indication that I had received a “computer virus”. Now, I don’t know if most people realise this, but if your computer gets infected with malware nowadays, it is most likely to financially motivated, and not at all in the malware author’s interest to notify you via a “black dot”. My company should have been warning me about social network based attacks, such as this one.
Also, Apple has convinced many mac users that they are more secure than Windows users. This is not entirely accurate. Now, back in the ’90s just after I installed Windows XP, I got a worm within 5 seconds. I knew exactly what I’d done wrong – I’d plugged the network cable into the modem directly and not into the router – had I been more careful and plugged it into the router, I’d have had firewall protection, which Windows XP lacked. Guess what, OS X ships with a very powerful firewall, but it’s disabled by default. One interesting titbit from the article:
The UNIX design came from a time when security was less of an issue and not taken as seriously as it did, and so does the job adequately. Windows NT (and later OSes) were actually designed with security in mind and this shows. Windows was not such a target for malware because of its poor security design; it is because the security functionality was never used.
I don’t mind which platform I use, they’re all pretty insecure. The weakest link is the human being.