Greg Leffler的动态

Tiffany Mickens

limiting what the app does will be a lot better in my own opinion

I think that putting "fences" to limit app ability to do certain operations may seem good in theory, but not applicable. People will always search free fancy apps to do what they want, not thinking sometimes that the "price" is their private life. If something is "blocked", they will fill forums of questions on how to unlock a certain feature. If it can't be done, most will move to a new platform that allows those features. So, sad but true, I think the best we can do is to make a process as transparent as possible for those who are willing to read...

Voice warning could help a lot...

I have also noticed that most people simply do not read warnings, information dialogs, tips, nags, or any other message you use to try to get your point across. Unless it directly pertains to what they are searching for or trying to accomplish at that given time, they will skip over it and dismiss the notion like I skip over the salad option at any food establishment. I won't be completely dismissive and say that this is just due to "stupid users", though. I would say it's due to the volume of information that people are assaulted with and they have basically been trained to scan through for only what they are actively seeking. So perhaps we use a combination of education in the form of subliminal messaging to users and set the software standard to require verifiable justification for the permissions it seeks. Tongue in cheek aside, teaching good browsing habits seems to be more effective when you use engaging content (entertaining and easily digestable videos and games) and incentives. Let's face it: scare tactics don't work for security awareness any more than they work for sex education. Throw in an Amazon gift card and it's amazing at what people will do...

Warning for life also ?

This is a network administrator issue . If it's not a trusted app, simply not downloading it is the easy decision. However, not everyone can make this decision. Your right, people will click through warnings. This is why it's good to set limits on download permissions. A good network administrator is going to limit every user's ability ( permission) to download anything. Ya it sucks. Yes, it may slow down productivity . But do you want your network secure? Cisco has some great products for managing networks. Does google have equivalent network management software ?

Could they perhaps limit functionality to apps from unkown sources, yet give more functionality to apps from very well known sources and suppliers which have security measures in place to protect their clients?

Leffler, your video dialogues are getting better!

Require revalidation with 2FA