[133953] in cryptography@c2.net mail archive
Re: Fake popup study
daemon@ATHENA.MIT.EDU (Jim Youll)
Wed Sep 24 17:32:21 2008
Cc: Cryptography <cryptography@metzdowd.com>
From: Jim Youll <jim@cr-labs.com>
To: Sandy Harris <sandyinchina@gmail.com>
In-Reply-To: <c5528eee0809231515t8322c42qc5f2bff4e94f3b40@mail.gmail.com>
Date: Wed, 24 Sep 2008 16:30:37 -0400
On Sep 23, 2008, at 6:15 PM, Sandy Harris wrote:
>> =46rom Slashdot: Psychologists gave university students phony
> popups with various malware warning signs. Many just clicked.
>
> =
http://arstechnica.com/news.ars/post/20080923-study-confirms-users-are-idi=
ots.html
I think it's got to be said that it's not apparent that the end-users =20=
are the /idiots/ who
should be called out for "failing" this study.
"We" gave them these interfaces, protocols and technologies that allow =20=
for things to go
so badly wrong. Nothing in the world required the technology ecosystem =20=
to become
what it is, except design decisions that were (and are) made well out =20=
of the sphere of
influence of mere "idiot users."
This stuff was designed and shepherded to market by the modern =20
captains of industry,
by rock star developers and w=FCnderkinden.
When a real engineer builds a bridge that falls down, we blame the =20
engineer, not gravity.
Bad people have always existed in the world. When developers pretend =20
they don't exist
and people are then victimized, we're supposed to continue to accept =20
the bluster about
technology rock stars, and therefore conclude that the customers (who =20=
outnumber the
developers by what, 1,000 to 1?) are the "idiots"?
Let's reconsider that. Seriously, let's shout it down. It's a =20
ridiculous proposition that's
tiring to hear time and again.
I'll even argue from the other direction just to make it complete.
Even if they are all idiots: when a population you serve outnumbers =20
you by 1,000 to 1
and keeps blowing itself up when using your stuff, it's time to idiot-=20=
proof the product.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
