[LINK] Study shows pop-up warnings are ineffective

[Kim Holburn]

Actually there's no reason why a piece of code from a random website  
should have access to all the resources you have access to when you  
run your computer.  It should be sandboxed.  Current computer security  
models are still 20 years old.

I use noscript and wouldn't surf without it but I have a real problem  
recommending it to most people who wouldn't understand why some  
websites wouldn't work.  And probably the most important ones for them  
ie yahoo mail, google mail and hotmail (well hotmail is a problem on  
non-ie browsers anyway)

On 2008/Sep/30, at 8:06 AM, Pilcher, Fred wrote:

> Jan wrote:
>
>> Then I'm a die-hard. I only turn on if I need it. NoScript is
>> your friend. Speeds up downloads, too. I also added a
>> Flashblock add-on that works well.
>
> As am, and so do, I. Functionality is significantly improved, too.
>
> While I'm no expert, I'm reasonably well-informed - dramatically  
> moreso
> than Joe Sixpack. To imagine that Joe (who was told that a computer is
> like a fridge - you plug it in and it works) is capable of making
> informed decisions about what he clicks on and what he doesn't is a
> recipe for botnet armies.

--
Kim Holburn
IT Network & Security Consultant
Ph: +39 06 855 4294  M: +39 3494957443
mailto:kim at holburn.net  aim://kimholburn
skype://kholburn - PGP Public Key on request