Slashdot Mirror


License to Surf, Take Two

NaugaHunter writes "A story on Yahoo asks Should [a] License Be Required to Go Online? It appears to be suggested by Bruce Schneier, chief technology officer for Counterpane Internet Security Inc. 'It could be a four-year college degree, a one-month course. It might be a good idea.' The story also details efforts of some schools from simple orientation to threats of fines for spreading viruses, and questions exactly who would be responsible for keeping track of who is and isn't licensed." Not a new idea, but one that's going to keep coming up. Update: 09/13 18:11 GMT by M : Bruce Schneier notes that he isn't in favor of computer licenses.

93 of 503 comments (clear)

  1. All I can say is WOW. by LinuxMan · · Score: 5, Insightful

    That is a bit too much control on our rights, in my opinion. I would think that if that can happen for the Internet, then it could also happen for TV, telephone, and any other type of communication device.

    Though education is important, it is the software vendors who are really to blame for a lot of the problems... (i.e. RPC holes, etc) A lot of the propagation of viruses and worms is a result of software accessing flaws in the software, without user intervention.

    Apple 10 GB iPod

    1. Re:All I can say is WOW. by Sneftel · · Score: 3, Insightful

      The TV and telephone are different, tho; nobody ever caught a virus from a telephone (Douglas Adams references aside), and you do in fact need a license to run a TV station. The point is that, as a computer user, you have the ability to unwittingly affect lots and lots of other people.

      It's tempting to blame the vendors, and blame for stuff like the RPC holes should of course fall squarely on Microsoft's head, but keep in mind how successful trojan horses have been; some of the worst epidemics have required the uninformed cooperation of their victims.

      --
      The opinions stated herein do not necessarily represent those of anybody at all. Deal with it.
    2. Re:All I can say is WOW. by SampsonSimpson · · Score: 5, Insightful
      Viruses and the holes they exploit are the responsibility of the programmers, and they are in a better position to fix these problems rather than trying to distribute the responsibility to users. While preventative maintenance on behalf of the users should be encouraged as much as possible, it should never become a pre-requisite to internet use.

      It's plainly impractical, (Given the global nature of the internet, how do we go about giving one entity the responsibility to handle all of those registrations?) and it would implicate much privacy concerns.

      Also, (and possibly more importantly) I think there are very important First Amendment concerns raised with a mandatory licensing scheme - The internet is a communication medium, and I'm not sure a licensing requirement will strike the correct balance between security/safe computing and free speech; In ACLU v. Reno the Supreme Court viewed the internet as a "unique and wholly new medium of worldwide human communication" and that "the interest in encouraging freedom of expression in a democratic society outweighs any theoretical but unproven benefit of censorship." The Court was concerned with the CDA and its censorship of pornography, but I think the logic applies to all forms of government restrictions on internet communications. I think the court recognizes the importance of the internet and its impact on speech, and but for compelling reasons, free speech will be given more deference over restrictions that provide dubious benefits.

      I don't think virus/exploit free computing is compelling quite yet, because I think I am capable enough to prevent most exploits on my computer. Whether someone else prevents it from spreading or not is irrelevant to me - only I have the ability to prevent it from attacking me. I shouldn't blame you for sending me a virus, I should blame myself for not being able to prevent it from infecting my machine

      I suppose it's different when an intrusion is per se harmful to a third party (for example, when I start harming the RIAA after a virus infects my computer and starts sharing music files) but those situations should be handled on a case-by-case basis anyway.

      Basically, my point is that licensing internet use is a bad idea, and possibly unconstitutional. Let's not even consider it.

      and no, IANAL.

    3. Re:All I can say is WOW. by rolocroz · · Score: 3, Funny
      --

      I meta-mod all positive moderation Unfair, because it's abuse of the system.

    4. Re:All I can say is WOW. by ATMAvatar · · Score: 2, Informative

      nobody ever caught a virus from a telephone

      Are you sure?

      --
      "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety."
    5. Re:All I can say is WOW. by KrispyKringle · · Score: 2, Insightful
      TV and telephone aren't very different. In fact, you have a far greater claim to ownership--and legitimate, uncontrolled right to use of--the airwaves than you do the Internet or phone lines. If ATT wanted to shut off their phone lines, fine (although of course various telecom laws would actually complicate this matter tremendously; these are "artificial" anti-trust measures, not general issues of ownership). Comparitively, the TV airwaves are technically owned by the public and subletted to the license holders in exchange for them performing a number of favors for the civic good, such as showing air-raid warnings and such. You may not agree with this distribution, but the idea really was supposed to be that the airwaves aren't much good without regulation, so we'll make things best for everyone (especially the rich corporations).

      The Internet is really the opposite, though. As more people use it, it becomes more valuable, not less. The airwaves are a means of communicating one-to-many. The Internet is many-to-many. If less people were allowed to use it, less would find value in it as well. Yes, irresponsible use like viruses, spam, and so forth do make it difficult sometimes. But if this is the only way to prevent them, it sounds like the cure is worse than the disease. A regulated Internet with only certain people being allowed to access it is an Internet neutered of any of its valuable assets.

      And you can say that trojans are solely the fault of the user, but ultimately, they could still be prevented, theoretically, at least, by good programming.

    6. Re:All I can say is WOW. by SW6 · · Score: 3, Informative
      The TV and telephone are different, [...] you do in fact need a license to run a TV station.

      Interesting factoid: all telephone use in (at least) the UK is actually licensed. Sure, it's a class license (essentially the kit is licensed by virtue of it being idiot-proof enough to allow the unwashed masses to use it safely) but it's still a license. This license can be, and sometimes is, withdrawn from individuals or groups if they're causing problems with the system.

    7. Re:All I can say is WOW. by Casshan-Robot+Hunter · · Score: 3, Interesting

      Actually, it is NOT public infrastructure. The major backbones of the internet are privately owned and the companies that own them (such as AT&T) allow their free use. They make so much off just having this infrastructure for their own use that they can afford this.

      Also, let us consider the fact that the US does NOT exclusively own the internet (or WWW) anymore. World-wide, remember? I think it is time that the US government stopped trying to regulate areas they have no business in. They have no right to tell us what we can say in conversation, in a letter, or in a phone call. The same should apply to the internet.

      --
      Why oh why didn't I take the purple pill?
    8. Re:All I can say is WOW. by blibbleblobble · · Score: 2, Interesting

      "the programmers are in a better position to fix these problems rather than trying to distribute the responsibility to users"

      Exactly. As much as some people would like a government-approved "way to use your computer" training course, how useful can it really be?

      Lycoris recently included a virus-checker in their GNU/Linux distribution, despite the fact that there are no known viruses which propogate on such a system, and their virus definition file was empty. Their reason? "The IT departments won't let us buy a computer unless it comes with a virus checker"

      Now if even IT departments can demand a microsoft-centric view of how you should run your computer, then can we expect anything better from a government? "don't run binary executables, but if you get one from windows update, run it without question..."

      Would anybody here even be able to sit through an exam writing "I run MS-Office Update every day [on my BSD machine]" without walking out, or swapping nasty words with whoever set the test?

      I can see health insurance on tongue-biting injuries increasing significantly.

    9. Re:All I can say is WOW. by zaphodbblx · · Score: 2, Insightful

      Well I feel I pay my licence fee EVERY FREAKING MONTH when my 37.00 cable bill is paid. We pay every time a piece of software is bought! If the onus is on any one to close the massive freaking holes the hackers exploit it should be the SOFTWARE companies like "Microsoft". Why? because they knowingly leave big security holes in their product just so they can rush a new version to market every six months

      --
      "A towel is the most astounding Mind-boggleing useful thing in the universe, allways know where your towel is"
    10. Re:All I can say is WOW. by Mr.+Slippery · · Score: 3, Insightful
      The Internet is really the opposite, though. As more people use it, it becomes more valuable, not less.

      You sure about that?

      I started using the net in 1988. I thought it would be really neat if someday everyone had e-mail.

      I reconsider that with every penis enlargement spam that hits my inbox.

      The Internet becomes more valuable as more knowledge traverses it; but as Zappa observed, information is not knowledge. Most of what's being added now is static, not signal.

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
    11. Re:All I can say is WOW. by KrispyKringle · · Score: 2, Interesting

      You sound a bit elitist to me. I'll agree that there may not be a linear relationship between usage and information; certainly some people could be stricken from the net without the rest of us noticing. But everyone having e-mail is pretty useful, too. Then again, I may not be the one to ask. I don't get spam, and I've been largely unaffected by blaster and sobig.

  2. While we're at it... by Anonymous Coward · · Score: 3, Funny

    Why don't we start taxing email! Or perhaps data by the megabyte! Think of the revenues!

    1. Re:While we're at it... by Serapth · · Score: 2, Funny

      Yes, I missed out on the math error... I know im going to hear about it... again... and again... and again... :) This is slashdot, right? ;)

      In regards to the governement handling it... I agree 110%... in all things, I generally want less government involvement, not more. I would think the only feasible way to "tax" email... would be for the charge to be from the worlds telco's. I should imagine a technology could somewhat equivelant to how phone calls are billed now, could be applied to email. That said... I would never *EVER* want to see the billing structure be comprable to, say, long distance providers now...

    2. Re:While we're at it... by Serapth · · Score: 2, Insightful

      I agree... the current mail protocol would have to be replaced...

      But, I dont think thats such a bad idea... lots of things need fixing anyways...

    3. Re:While we're at it... by MattCohn.com · · Score: 2, Interesting

      And does the spammer pay, or does the pour sap with the open relay just get their connection yanked and faced with a bill they (arguably) didn't deserve?

    4. Re:While we're at it... by Desert+Raven · · Score: 4, Insightful

      and truly I dont think its a stupid idea

      I do, it's an incredibly stupid idea.

      I pay several thousand dollars a year to have a small handful of computers colocated so I can run email/web, etc efficiently. *I* paid for the computers, *I* pay for the bandwidth, and *I* pay for the storage. My users in turn, pay me for access to those systems.

      Essentially, I own and operate the equivalent of a local post office. Who the hell has the right to tell me I've got to pay the government (or anyone else) to send email?

      The Internet is not a public service to be taxed. It is almost entirely privately owned, with a standing "gentlemans agreement" between the owners that each will allow traffic to and from each others' property.

      So unless you've got some bright idea for distributing that tax money to the folks like me who actually own and operate the equipment, you can take your email tax idea and put it someplace moist and dark.

    5. Re:While we're at it... by Enigma+Deadsouls · · Score: 3, Interesting

      What about some kind of regulation (whether through the government or the telco) as to what kind of e-mail client would reside on the clients computer?

      That would be a stupid idea. First there is the problem of people who use different os.. so this would mean if I chose to use an os thats not supported by the client I am screwed and can't send/receive emails? Then comes the problem of how trustworthy the government/telcos are. Remember carnivore? Wouldn't the government just love it if they could just make all email clents automatically send them email. Then what about encryption? Would options like PGP not be able to work? Maybe they would let PGP work however it would send the government the email pre-encrypted.. or better yet the government will give you the option of encryption in the client.. however an encryption with a known backdoor so the government can read it.

      I'm sorry.. I just don't like the idea of a government/telco regulated/issued email client.

      What about e-mails originating from overseas? Those wouldn't be taxed and therefore wouldn't really put much of a damper on spam coming from across the ocean.

      Well then how would a government/telco regulated/issued client fix this problem? What gives the right to a government/telco to tell other countries what email client they must use? What if these countries don't comply? Does this mean all email from the countries would be blocked? That would really be pain in the ass for people who conduct international business.

      The internet is a place of freedom... freedom to use whatever os/browser/email client/other I wish... lets keep it that way.

    6. Re:While we're at it... by ncc74656 · · Score: 3, Informative
      And does the spammer pay, or does the pour sap with the open relay just get their connection yanked and faced with a bill they (arguably) didn't deserve?

      A luser who runs an open relay and gets socked with a huge bandwidth bill (or worse) on account of spammers using his mailer deserves whatever he gets. Setting up an MTA to only accept outbound mail from selected hosts is trivial, if the software is well-designed. With the access-control software that's available (whether it's an SSH tunnel, POP-before-SMTP, or whatever), there is absolutely no reason whatsoever for anybody to run an open relay.

      --
      20 January 2017: the End of an Error.
    7. Re:While we're at it... by pompousjerk · · Score: 3, Funny

      ...I agree 110%...

      Today just isn't a good math day for you, is it?

  3. this article should be labeled by Frymaster · · Score: 3, Insightful

    flamebait.

    1. Re:this article should be labeled by BrookHarty · · Score: 2, Insightful

      Yup. Paid by MS I bet.

      Its not our fault our software has bugs, it the users for clicking on attachments, or surfing on the Internet with our software. Pass the buck, blame the user.

      Lucky it will never happen, nice puff piece. But with all information moving online, you cant require a license to access the information, or read a newspaper.

    2. Re:this article should be labeled by Serapth · · Score: 4, Insightful

      Actually... it is more a linux-esque type article. MS makes its billions off catering to the slobering masses... Linux is the soceity that tends to bash users for being too stupid to do anything... The whole "lets license users" type argument for surfing is a complete tech-elitest typical bs approach. Then again, you idiot proof something, the world builds a better idiot. The real answer is most likely to make a more modern, effective and adaptive education system... both in traditional school years, and there after.

      That said, I agree... the article is total flame bait. Oh well.

    3. Re:this article should be labeled by hankaholic · · Score: 3, Insightful
      Linux is the soceity that tends to bash users for being too stupid to do anything... The whole "lets license users" type argument for surfing is a complete tech-elitest typical bs approach.
      To some extent, possibly, although I've often seen Slashdotters stand up with comments such as, "What about people in China (et. al) using the Internet for purposes which aren't condoned locally? The Internet can be a way to communicate with the world despite the wishes of the local governance."

      Given this viewpoint, many Slashdotters would realize (and vocalize about) the idea that requiring licensing from the locally ruling bodies could restrict speech in those localities in terrible ways.

      It seems to me that Slashdotters often seem to hold freedom over security.
      --
      Somebody get that guy an ambulance!
  4. Can we by Phosphor3k · · Score: 2, Funny

    Take care of revamping drivers tests first? A retarded monkey can pass drivers tests in most states.

    1. Re:Can we by enomar · · Score: 3, Insightful

      Driver's test!? What about having children?

      If I need a four year degree to surf the web, what will I need to procreate? A Nobel prize?

      --

      :wq
    2. Re:Can we by Shadestalker · · Score: 5, Funny

      I was going to rebut, but my ride is here - gotta go before he starts flinging feces at the neighbors.

    3. Re:Can we by Anonymous Coward · · Score: 4, Funny

      what will I need to procreate? A Nobel prize?

      Panic not, aspiring scientist! First you'll need a girlfriend.

    4. Re:Can we by hamster+foo · · Score: 2, Interesting

      "I know who think it's ok to go 10mph over the speed limit"

      Are we talking ok from a safety stand point? If so then they very well may be right. A safe speed is dependent on a lot of things, and a sign with big numbers on it is hardly one of them. If it's a bright sunny day outside, it's obviously safe to go faster than if it's raining outside. Different vehicles are safer to operate at higher speeds due to having the proper tires among other factors. In the state I used to live in they raised the speed limit on a highway I commonly traveled from 55 to 70 without any change to the highway. Did it suddenly become ok to travel on that road at 15 mph over the previous speed limit?

      Legally, there isn't much argument. The government says it's illegal so it is. But the qualifications of goverment agencies to set appropriate speed limits, presumably based on safety concerns, is somewhat questionable.

      --
      - b
  5. Blah. Blah and double blah I say. by pavon · · Score: 4, Insightful

    First off this whole virus issue is just starting to get really bad. A few years ago it wasn't necisarry for the average user to be so vigiant. As it become necisarry, whose to say that they won't learn by collective experiance. And if you are going require licenses from anyone, lets start with the people writting poor software that is allowing the net to degrade the way it is? (and again whose to say that they won't improve on their own now that it is becoming more necisarry to do so).

    But here's my real question. Why post such flaimbait? This article is just some nobody giving his foolish opinion in a non-influential news site. If this was on CNN, then i could kind of see posting it. It this written by a big name in IT, I could see posting it. If there was ANY chance that this guy would be taken seriously, i might understand posting it. But there is none. This article is pure flaimbait, and Bruce Schneier is a Nazi.

    1. Re:Blah. Blah and double blah I say. by origin2k · · Score: 2, Informative

      Bruce Schneier is a Nazi

      I actually sent an e-mail to Bruce to discuss some things with blowfish about a year ago and he actually returned a very thoughtful and information e-mail. Most people as busy as him would not do so.

      Perhaps there should be required training before posting on /.

  6. Just Hold Responsible by 2starr · · Score: 5, Informative

    I help administer an apartment/dorm-ish complex at a university. Basically the approach we're taking is letting people know what's expected: virus checker, etc. If an incident occurs and we find the person wasn't taking adequate precautions, they get fined.
    I don't think you can require people to do stuff like take classes, but if they're neglegent, they should be held responsible.

    --

    "Let your heart soar as high as it will. Refuse to be average." - A. W. Tozer

    1. Re:Just Hold Responsible by TwistedGreen · · Score: 5, Insightful

      So if everyone gets infected, does everyone get fined? I think it's ridiculous to get fined at all, let alone getting fined for deficiencies in software /you/ didn't write.

    2. Re:Just Hold Responsible by leviramsey · · Score: 2

      You choose to use the software. If you can't judge the risks and take adequate precautions, it's your fault.

      If a trojan installs a spam spewer on your system: it's your fault.

      The software on your system is an extension of you; it is acting as your agent. It's infractions are your infractions. Period.

    3. Re:Just Hold Responsible by Anonymous Coward · · Score: 2, Insightful

      Yeah, and if someone steals your car and kills somebody with it, you're going in the slammer!

    4. Re:Just Hold Responsible by aardvarkjoe · · Score: 3, Insightful
      If an incident occurs and we find the person wasn't taking adequate precautions, they get fined.

      They're not getting fined for deficiencies in software. They're getting fined for irresponsible behavior. What's wrong with that?
      --

      How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
    5. Re:Just Hold Responsible by Lawrence_Bird · · Score: 2, Insightful

      If I go outside with a cold and you happen to get sick a week later, are you going to come to my house and fine me?

    6. Re:Just Hold Responsible by dalutong · · Score: 2, Interesting

      3. Companies would then become even more controlling. They would say "we will protect you from these fines, so long as we have absolute control over your system. We can install software when we feel we need to, etc. Okay?" and the 50,000,000 internet users who don't want to worry about updating their anti-virus software say, "okay."

      Good-bye, Software Choice. You were a swell guy.

      --

      What comes first, finding a teacher or becoming a student?
    7. Re:Just Hold Responsible by Gogl · · Score: 2, Insightful

      What makes more sense to me (and what they do at the university I attend) is to not fine those who get viruses, but rather to require that they have all service packs installed and a virus scanner (they can download one for free from ITS if necessary) before they can access the internet, and then if they still manage to get a virus just cut off their internet access until they're clean again. Makes sense to me, at least.

  7. Great... by G33kDragon · · Score: 2, Interesting

    So once the users are educated with a basic set of computing knowledge, and when only people that actually know what they are doing are using computers...what's going to happen to lovely tech support?

    1. Re:Great... by Verteiron · · Score: 2, Insightful

      We license people to drive, but traffic cops and state troopers don't seem to have much trouble holding on to their jobs...

      --
      End of lesson. You may press the button.
  8. The problem isn't the users. by Malor · · Score: 5, Insightful

    In essence, we are blaming users for things that aren't their fault.

    The article talks about the need to install anti-virus software, and keep up on patches, and to read the fine print in click-through licenses to prevent spyware from being installed. All of these things need to be done to operate a computer safely, true.

    But why the hell are they required? We are giving users HORRIBLE software that is prone to constant infection. Some companies are taking advantage of click-through licensing to hijack people's computers. And we're blaming USERS for not doing the right things?

    That would be like making cars that exploded if you ran them at exactly 62mph for more than 12 continuous minutes, with brake systems on the outside of the car where anyone could walk by, flip a switch, and disable them, as well as aftermarket accessories that forced cars to drive on particular roads at particular times.... and blaming the drivers when cars blow up, can't brake, or cause traffic jams on certain roads.

    People mostly just want to do email and read the web. We should be providing them software that does this with absolute security.

    We are blaming users for faulty software.

    1. Re:The problem isn't the users. by tsg · · Score: 4, Insightful

      It's not a "black-and-white" issue. No software is 100% secure. No hardware is 100% secure. Users are going to have to patch their systems at one time or another. Users also have to know not to open attachments in email unless they're reasonably[1] sure it's not dangerous.

      At the same time, software and hardware manufacturers (closed and open source alike) have to be diligent about shipping reasonably[1] secure products.

      And let's not forget the people who supply the pipe through which the lusers with their horrible software are infecting every other computer on the planet. ISP's have to be more responsible for their users. Both in educating them and preventing them from being too dangerous when they do screw up.

      All sides need to do their jobs better.

      [1]For very large values of "reasonably"

      --
      People's desire to believe they are right is much stronger than their desire to be right.
    2. Re:The problem isn't the users. by WolfWithoutAClause · · Score: 2, Interesting
      Still, it's probably a good idea anyway- a lot of viruses and worms rely on users doing silly things.

      The classic example is urban legends, these entirely rely on the misbehaviour of users- I've multiple times received emails warning me about LSD stickers going around that look like superman, about microsoft sending money to anyone that replied to an email etc. etc. These get sent by the hapless orginator who thinks they are doing the right thing, and often are sent to a huge distribution list.

      The Microsoft one went around where I used to work and caused an email storm, where several hundred people all asked to be removed from the email distribution list. Trouble was, there was no distribution list, it was just a Cc'd email. This went on for several days with people calling each other names, and replying to everyone each time. It was ghastly; and the email servers were taking a severe beating with several hundred emails each being forwarded to several hundred destinations. And the whole thing was a hoax that anyone with google could check in 30 seconds flat.

      This kind of thing can be mostly avoided by training people with access to email.

      --

      -WolfWithoutAClause

      "Gravity is only a theory, not a fact!"
    3. Re:The problem isn't the users. by MotherSuperior · · Score: 2, Insightful
      How are we going to provide absolute security to users, when we can't even get it on our high-end systems?

      Absolute security is an inherent impossibility in any situation.

      That said, I think the idea is sound, and the comparison drawn to a driver's liscence is fair. However, as is also pointed out, who is going to implement this? I think we've basically got 2 hypothetical choices.

      - The Government

      - The ISP

      In the first case, we clearly do not want the government making the decisions about who gets online, and who does not. In the second case, we'd have ISPs whose revenue streams depended on people actually passing the test - which rather defeats the purpose.

      I think what we have here is a beautiful pipe dream. I'd love to live in a world where some magical, benevolent overseeing body decided who could get online, who could drive, and who could procreate.. possibly even who should be allowed to exchange oxygen for carbon dioxide. But the fact is, no authority exists on this planet that could be trusted to implement this in any fashion other than a complete travesty.

      --
      This is my sig. There are many like it, but this one is mine...
  9. Say nay to barriers to entry... by Empiric · · Score: 4, Insightful

    Should License Be Required to Go Online?

    No, but perhaps grammar skills should be required to work for the Associated Press...

    Seriously, this is a terrible idea. This would open up chicken-and-egg problems across the whole range of learning endeavor computers and the internet offers.

    The analogy of needing a license to drive a car is used repeatedly in the article, but I think that's not quite the right analogy; maybe requiring you to know how to rebuild an engine before you ever drive would be more accurate. One of the expectations mentioned is that you must know how to set up a firewall; is this really realistic to require before any unsupervised on-line time?

    The internet is growing because it's accessible, reasonably. If I needed a license to buy a book, I might never have started reading--and a book is a more accurate analogy than a car.

    Put the responsibility for viruses where it belongs, on the network admins and software vendors, not the newbies. Everybody's got to start somewhere.

    --
    ~ Whence do you come, slayer of men, or where are you going, conqueror of space?
    1. Re:Say nay to barriers to entry... by Xoid629 · · Score: 3, Insightful
      The other major problem with the car analogy is that driving a very heavy piece of equipment at high speeds is dangerous not only to the driver but also to any anyone else around. What you do online may be annoying or troublesome, but it is extremely unlikely to kill anyone. (And requiring licences to simply use a computer seems utterly insane -- the article seems to imply that this might be part of the idea, although it may just be that the author personally can't distinguish between using a computer and being online.)

      Anyway, I think the idea of trying to control access to the general internet is ridiculous, but I do wonder about the possibility of having alternate network(s) (probably running of top of the normal internet). A system that limited use a bit (without being too restrictive) and also discouraged commercial interests would be great in many ways -- something like the early internet, I guess (although I wasn't there so I don't really know). I'm not sure if a system like that would really be practical or necessary even a good idea, but I sortof like the general concept.

  10. Gasp! by Weatherman-au · · Score: 3, Funny

    You mean the "Internet Driver's Licence" isn't a real licence for that there Interweb? Bugger, now I have to take it off my resume.

  11. this sounds impossible by kaan · · Score: 2, Insightful

    In fact, this is not only impossible, but unrealistic and rather terrible. Why? Because there will be absolutely no practical way to enforce, encourage, or even suggest uniform "rules" (whatever they might be) in every country around the world.

    The article plainly says that we are continually exposed to junk mail, viruses, etc., and this would help to eliminate such things, but one of the reasons that such nuisances exist is because there is no single governing body over the internet. As much as I'd like to see this idea take off and clean things up, I think it will never, ever fly.

  12. Well, you have to have a license... by BattyMan · · Score: 3, Interesting

    To drive a car
    to fly an airplane
    to use any radio transmitter beyond minimal power walkie-talkies, cellphones or 802.11.

    All these things are done to help enhance the safety of everyone using the medium.

    The signal to noise ratio of the Internet (maybe I oughta make that noise to signal) is typical of things which are totally out of control...

    --
    Exceeding the recommended torque is not recommended.
    1. Re:Well, you have to have a license... by BattyMan · · Score: 2, Interesting

      In order to get a SCUBA tank filled with compressed air you have to flash certification credentials saying that you've the knowledge to use it without killing yourself.

      Could ISP's not require _some_ sort of credentials assuring them that you've a clue?

      I see an apalling level of ignorance, from modern electronic office workers, whose _jobs_ consist of reading and sending email, building webpages, making PowerPoint presentations, expressing themselves via "desktop publishing" & spreadsheets, doing www research, and on and on. Despite _making_a_living_ off their computer "skills", they're totally clueless.

      But then, plenty of the licensed motor vehicle operators I see are clueless, too, and the fact that they had to get a license first does not help them - one bit.

      --
      Exceeding the recommended torque is not recommended.
    2. Re:Well, you have to have a license... by antiMStroll · · Score: 4, Insightful

      The manufacture of cars, airplanes and radio transmitters are also regulated by massive standards bodies and testing, far more strenuous than any training imposed on users. Doesn't it make more sense to start there if we're really concerned about enhancing "the safety of everyone using the medium"?

  13. Ooooo...wait till they approve a curriculum by JoeShmoe · · Score: 2, Funny

    Which includes lessons on how Windows(R) with its WindowsUpdate(TM)(C)(R) is more easy to secure than Linux and even UNIX!

    And you thought the evolution in schools issue was a flamefest...

    - JoeShmoe
    .

    --
    -- I wonder which will go down in history as the bigger failure: the War on Drugs or the War on Filesharing
  14. Godwin's law! Damn! by SoTuA · · Score: 3, Funny
    Bruce Schneier is a Nazi.

    Damn! There I was, putting my finishing touches on my "+5 insightful" comment and BAM! the discussion is ended!

    oh well... there'll be other threads...

    1. Re:Godwin's law! Damn! by NoMoreNicksLeft · · Score: 2, Funny

      Yes, and he scored triple bonus points, because his very last word was nazi, no less.

      I get tired of amateurs that use it in the first sentence of a large paragraph.

  15. Better idea by rossz · · Score: 5, Insightful

    I think someone should have to take a course in the Constitution before making stupid fucking statements that would limit people's rights.

    --
    -- Will program for bandwidth
    1. Re:Better idea by rossz · · Score: 2, Insightful

      That's why the internet is so important. It gives EVERYONE the opportunity to participate in that freedom of press thing.

      Don't take the word "press" to literal. It's intent was that everyone had the right to publish their opinion and make it available to the public. At the time the Constitution was written, this meant a printing press. With new technology, the means may differ, but the concept remains the same. When you post a rant in your blog, you are publishing your opinion and making it available to the public. You are exercising your freedom of press.

      Should we be required to have an internet license, we would be yanked back to the situation we had prior to the internet -- newspapers and such controlled by just a few large corporations all with pretty much the same message and no viable alternatives. I don't want that. I hope you don't want that.

      --
      -- Will program for bandwidth
  16. College degree?? by bob65 · · Score: 3, Funny
    It could be a four-year college degree.

    Um, yes. I'm proud to be a Bachelor of Mouse-Clicking.

  17. Is this industry PR to distract people? by JohnDenver · · Score: 2, Interesting

    From considering that maybe companies like Microsoft should be held liable for knowningly shipping an insecure product?

    The last thing I want to see is the software be subjected to the same liability/litigation as the aerospace industry, but I don't believe a EULA should protect a manufacturer from not fixing a product that is inherantly secure.

    The question we need to ask ourselves, "Has Microsoft knowingly done nothing to fix a security hole?"

    Nah! Let's just legislate RTFM!

    --
    "Communism is like having one [local] phone company " - Lenny Bruce
  18. Our Own Network by Heem · · Score: 5, Funny

    When we, the technologicaly elite, make our OWN network, based on encrypted tunnels on the existing infrastructure - then we can choose what level of certification is required to interact with peers.

    I'm serious.

    --
    Don't Tread on Me
    1. Re:Our Own Network by Tom · · Score: 2, Insightful

      Your problem is that you will still suffer from the next Melissa/CodeRed/Blaster/whatever outbreak, because when the pipes are saturated, they are saturated and your encrypted tunnels go down.

      If all the windows viruses would only affect windows systems, I couldn't care less. It's that they affect us all that bothers me.

      --
      Assorted stuff I do sometimes: Lemuria.org
  19. Flamebaity, but not really flamebait by Anonymous Coward · · Score: 5, Insightful

    The point I think our OP is trying to get at here is that people have been talking about forcing licensing for all manner of things, from Internet licensing to licensing for having a baby.

    The solution isn't licensing, it's education. Education isn't something that is achieved through licensing, it's learned through a concerted effort to make people aware of the problems. Licensing only achieves getting people aware of knowing the answers to a test.

    1. Re:Flamebaity, but not really flamebait by PotatoHead · · Score: 2, Interesting

      I agree 100 percent with the education bit. It should start with our representitives and move upward from there.

      The part I hate the most is the Microsoft snow job. Everyone is using the software, Gates is a genius (which he is with regard to business BTW), something else must be done to preserve motherhood, apple pie and the American way right?

      If you toss IE and Outlook, half of this goes away. A company with large cash reserves should not be allowed to push the burden onto its users. Something is wrong with that. This is one of the reasons I will not buy any Microsoft software --I don't want to contribute to the problem.

      Microsoft gets tons of free tech support and still gets to make most of the money for its (broken) software. Why? Contracts and the general inability of our lawmakers to recognize software for what it is.

      Personally, I hope the problems continue. Maybe people will begin to get a clue when some of their peers start to move away from the one size fits all intergrated Microsoft solution onto one that does the same things, but does not have anywhere near the number of potential issues to deal with.

      Funny, I was working with a company today. The systems folks were laughing about how their investment in Lotus Notes was starting to pay off. At first, they considered it a mistake because it cost a lot and Exchange seemed to be a better deal. There was pressure to move off of the platform and onto Exchange to save money and administrative costs. The last couple of years have changed their tune.

      They are considering either Mozilla and or Opera as their default browser to gain some more of the benefit they stumbled into with Lotus Notes.

      So, go ahead and run win32. It's not a bad OS. (Would not be my choice though.) Just get rid of the problem areas.

  20. gentility by sstory · · Score: 2, Insightful

    Be gentile in your responses, I read what he said, and he's just sort of hypothesizing, he's not really advocating.

  21. Must redefine priorities by MikeCapone · · Score: 2, Funny

    People should need a license to have children, not to surf the internet.

  22. So what do you DO with the license? by wytcld · · Score: 4, Funny

    Knock on the door.

    "Please open up. We have reason to believe someone inside is online without a license!"

    The license can't just be a smartcard, or everyone will just leave theirs in the slot so family and friends have access - and likely put the whole crew and half the wireless neighborhood on NAT behind them. So we're going to have to build biometric security into every potentially Net-connected device.

    That will surely get the Dept. Homeland Security Seal of Approval. Let's have Microsoft build it so it really works!

    --
    "with their freedom lost all virtue lose" - Milton
  23. Not good by Anonymous Coward · · Score: 2, Insightful
    This is a Very Bad Idea. They want to license Internet Access, like they license buying a gun, or getting a license to drive. As if the internet has as much effect as a gunshot or a car crash! Besides, the real problems are the fundamental flaws in the design of protocols and software on the internet (i.e. open SMTP relays, email viruses - Yes, Office XP/NAV helps a lot, but I'll bet you there are still tons of people using Office 2000 who will never upgrade to Office XP, and who never renew their virus update subscriptions, so those problems MS created are around for a while longer). Users can be blamed, but so must the software creators.

    This is so ridiculus I can't imagine anyone ever thought of it. Not only would it be a content management nightmare, but you've got to realize... The internet isn't just in the U.S. of A! It's also part of the whole rest of the world! What about the people who live in south africa, who want to access the internet? Will they be forbidden to because they don't have a "Four-year college degree"?

    International implications aside, what would happen if someone were able to hack into the database being managed? Millions of internet user's information would be compromised.

    Even if you consider mandatory computer education, how much time would have to be spent? The computer users who are the people who would need the education, for the most part have real lives. They do not have the time to think and learn about something which is incredibly new and would probably take quite a long time for many people to learn. The fact is, the operating system that is most common, Microsoft Windows, does not assume that the user is an idiot. By default, it gives them complete, unfettered access to the entire system. This makes it MUCH easier for viruses to take over control of system processes (Read: trojans), and allowing viruses to have such a widespread affect with VBS. Now, other operating systems would probably have similar issues if they were the most used. There's no denying that. However, Microsoft in general has the attitutde that they should not be responsible for their users. What they have already done is in the past. There isn't much we can do about it, since the effects will be with us for some time. However, the one real step they could take is to make a "Dummy User" mode. This means, that any script being executed, any system level process that is instantiated, would have an attention-grabbing window that the user COULD NOT simply click away from, that would detail what is going on, and if the user really wants to do this. If measures like this had been taken, we would have avoided much of the problems we have today, especially with email viruses. I'm not a professional engineer, so I don't know many details, but I feel that this fact should be obvious: There are people who do not want to learn about computers. These people need a user mode that assumes this, and will walk them through their experience of computer usage.

  24. Blaming the user by metamatic · · Score: 3, Insightful

    Of course we're blaming the users. The users choose to purchase PCs running Windows.

    When people choose to buy Pop-Tarts, microwave them, and then eat them, we feel they have nobody to blame but themselves for the burns. Yet somehow when they buy Windows, ignore the safety directions that tell them to keep up to date with software updates, and hose the Internet, everyone seems reluctant to blame the idiots.

    Windows is not necessary. I've never purchased any Microsoft software, and I'm doing just fine. In my view, anyone who decides to spend money on a PC running Windows deserves what they get. It's not like it's some big secret that Windows is full of bugs, hard to use and unreliable--just read any PC magazine, or look at the shelves full of books like "1001 Windows Annoyances" and "How To Get Out Of DLL Hell".

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    1. Re:Blaming the user by LordLucless · · Score: 4, Insightful

      "anyone who decides to spend money on a PC running Windows deserves what they get"

      And there are, like, so many options too. It's fine for me, I build all my computers from parts. But the truth is, most people buy ready-made, plug-em-in-and-they-work type boxes. And most of those come with Windows. Not to mention that anyone who wants to play most games these days has to run Windows. Or just the fact that they know windows, and are comfortable with it.

      And lets face it, if clueless newbies adminned Linux boxes, they'd be almost as insecure Windows machines. Unpatched, permanently logged in as root, all files chmodded to 777 so they don't get any errors, no firewall, cause ipchains is just too tricky. I'd agree that Linux is a technically superior OS, but as we all know, technical superiority don't mean jack when it comes to the desktop market.

      --
      Just because you're paranoid doesn't mean there isn't an invisible demon about to eat your face
  25. why bother reporting this? To fight it! by twitter · · Score: 4, Insightful
    This needs to be reported because it needs to be combated. It need to be reported as long as "you need to keep up with the current patches and virus checkers and all that shit" is passed off as popular wisdom. M$ is trying to blame the user for it's own software failures and therby force restrictions on email, www, and all computer usage that would be benificial to themselves and harmful to free software.

    The user is never at fault for poor software, especially closed source crap the user can't fix if they could or wanted to fix.

    Virus checkers, email restrictions, firewalls and all that are in vain when faced with the reality of closed source distribution. I work for a small computer shop. The only software we can put on all the broken computers that come in for repair is the user's original software and any updates M$ lets you. The vast majority of computers out there run EOL'd systems like 95 and 95. Customers lack the skills needed to diagnose the problems or do the best fix, a wipe and reload. It cost them about $75 if they have all of their software, and they are loath to pay for the time it takes to load up all the patches and updates that won't protect them from next week's worm. I can't blame them for feeling that way. Nor can I blame them for wanting to email their friends. Those that have lost their software generally end up throwing their machine away or go find some nasty cracked copy of M$ shit because they don't want to spen the $109 and equpment purchase needed for an OEM copy of Windoze. The net result is the same in every case, boxes that are just as easy to bust as the day they were made. But, so what? Even the dilligent are getting burnt.

    I have recomended Mozilla for people who absolutly must have M$. My little brother told me that an XP update broke Mozilla and made it terribly slow, but Netscape still works. Woot.

    I'd recomend Debian or Red Hat and sell CDs for the same price as a driver disk, but my boss is worried about support. I'm not sure what kind of "support" could be worse than the mess most Windoze users now find themselves in. Still, he's the boss. The day, however, I can make money doing it, he's going to like it. I'm starting to think that the store's usual $4 per CD burnt and the 30 minutes it takes to install a dual boot of any linux system might be cheaper fixing Windoze. Blinding the windoze side to the network makes it last longer so that it can do the things it does well for the user.

    I'm starting to see the path of least resistance here. Demo the system with Knoppix to prove hardware use. Blind Windoze, dual boot and set them loose. Actually doing something beats the hell out of bitching and moaning. It can work.

    --

    Friends don't help friends install M$ junk.

  26. Re:I was gonna make a joke... by LostCluster · · Score: 3, Funny

    Let's face it... airline security would be a whole lot easier if they could get rid of most of the damn passengers and have a select group of 20 backround-check cleared people be the only ones flying.

    When securing something equals destroying it, you've got a big problem...

  27. No by dswensen · · Score: 2, Interesting

    As a tech support drone, I have to say that the second people have to have the slightest idea what the hell they're doing in order to get online, I am out of a job. So, no.

  28. Why exactly is a "license" the answer? by QuasiEvil · · Score: 2, Insightful

    Why is the automatic knee-jerk reaction of some people to start placing restrictions and bureaucracy on things? Let's look at licensing for a sec:

    - The internet is based on the free exchange of ideas between everyone - even those that I proclaim idiots. Many of these people have differing views on how things should be set up, what hardward/software to use, etc. Someone has to administer this license, and this just begs for abuse of power.

    - Many of the affected in the latest virus round were technical corporations. These are big places filled with lots of really smart (or at least well-educated, which is not synonymous) people. One of my fellow engineers got nailed by Slammer, because he forgot to patch one of our systems that sits in a corner (and somehow the damn thing got through/around the firewall). These people would easily get internet licenses, but they still forget about machines or otherwise screw up.

    - This is a bureaucratic solution (more paperwork, etc.) to a problem that either a) is purely technical in nature (buggy software) or b) isn't a problem but rather just the way things are. The last thing we need is more paper-pushers pushing paper rather than actual people solving the actual issues.

  29. No respect at all for Schneier, now. by HBI · · Score: 4, Interesting

    For pete's sake, this has to be the most elitist article I have seen recently. Because Mr. Schneier knows what to do to keep his computer uninfected, let's blame the users and force them to be certified to be online.

    Idiot.

    How about blaming the actual target, the operating systems and flawed web standards that allow this. Look at certification authorities, browser, and OS vendors. I saw one of those hidden install ActiveX objects recently that has a Thawte signature. Why? Well, that CA's root cert is preloaded in IE so therefore, the signed ActiveX will install without any user intervention with default security settings.

    What is wrong with this picture?

    1. Why is Thawte issuing a certificate/signing code to/from a shady vendor like this?
    2. Why does Microsoft let anyone with a signed ActiveX object install the thing without question, by default?
    3. Why does the functionality to do so over the web exist in the first place? We know that scripting/file upload from untrusted Internet sources is the #1 security problem with end user systems. So why?

    The problem was flawed assumptions at the outset. Microsoft assumed the Internet environment would remain benign, as it was in the early days of commercialization. Therefore, security was not a consideration. This has proven utterly false. The CAs figured they were in the business of printing up certificates for money. Check on the reliability of a vendor? Why, that would cost too much...so what are certificates and signing really worth? Not a whole hell of a lot. Yet we tell people to trust their money and credit card numbers to this intrinsically flawed system of 'trust'.

    We, in IT in general, really need to reconsider all these flawed assumptions we have made and the bill of goods that has been sold to the general public. I have been doing end user support for 15 years now and I would be all too willing to blame this on the user. In this case we cannot. In the end, we have to realize it is not their fault. It is ours. We assumed things would stay the way they were, and they haven't.

    Now let's fix it...invalidating the entire CA model and delegating that function to the government would probably be a good start. Have all certificates emanate from a government source or be considered invalid. That might actually work.

    While we are at it, let's get the government involved in regulating operating system software in a formal fashion. Sure, I like the private sector and all, but it hasn't worked, has it? We have this huge security mess. Perhaps a greater degree of regulation is required to get us out of this mire, because market forces aren't going to fix the fact that Microsoft's operating system is woefully inadequate for today's Internet and most probably cannot be fixed while preserving backward compatibility for a meaningful number of applications.

    The last two paragraphs were just ideas off the top of my head. I'm sure others could be arrived at, and better.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  30. Blame the victim, eh? by Safety+Cap · · Score: 3, Insightful

    So, by your logic, if a woman gets gang raped and beaten to death, its her fault because she should've worn her burka and not gone out of the house unaccompanied by a male relative. Red-blooded, honest men cannot control themselves from the intoxicating effects of nearby females, and she should've known that!

    --
    Yeah, right.
  31. RTFA, for heaven's sake, before you trash the man by melquiades · · Score: 2, Insightful
    For pete's sake, this has to be the most elitist article I have seen recently. Because Mr. Schneier knows what to do to keep his computer uninfected, let's blame the users and force them to be certified to be online.

    Idiot.


    Indeed.

    How to read the article:

    (1) Click the link.
    (2) Read.
    (3) Scroll down when necessary.

    Following this simple procedure, you will find the entirety of Schneier's wry little quote, which I will copy and paste here (instructions on that omitted) for your benefit:
    It could be a four-year college degree, a one-month course. It might be a good idea. The downside is everybody you know won't be able to have a computer anymore, and I like being able to send e-mail to friends.
    For those of you following along at home, I'd say that with "everybody you know won't be able to have a computer anymore", he is suggesting he doesn't actually think it's such a good idea.

    You're right though -- software does suck, and we shouldn't blame the users for what is mostly the fault of the software industry itself.
  32. ... And shoot those who leave open relays/proxies by Charles+Dodgeson · · Score: 3, Interesting
    I would like to see a highly publicized case of holding some home broadband user responsible for the fact that their machine was hijacked to send spam or participate in some DDoS.

    I've talked to too many people who've said, "I don't need to bother securing my home system because I've got nothing anyone would want." I've answered, "They want to use your machine to attack me." But the message doesn't sink in.

    While these end users are being provided with crap systems, there is a market out there. If their choice of bad systems gets them severly spanked, they will start making demands of their providers.

    All it would take would be a couple of high profile cases.

    --
    Prime numbers are exactly what Alan Greenspan says they are -S. Minsky
  33. License for 3-year-olds? What does online mean? by Josuah · · Score: 2, Interesting

    One thing which I haven't seen mentioned is how you would license a 3-year-old child. Anyone with small children and a computer is likely to understand that children at this age are already capable of using the computer to learn. Educational software is an existing market.

    "Grown-up" software has moved into the online realm because of the opportunities it offers in improving the user experience and program functionality. I would not be surprised to start seeing children's software do the same, although we're not there yet. Plus, children are learning more advanced topics at younger ages (well, at least some children are, Apple IIe anyone?) and it only makes sense for this to continue. I learned about modems, BBSes, and online research when I was maybe 8? Whenever 386s were top-of-the-line.

    Also, what exactly does going online mean? If I pop in a DVD, it might take me to a web site. If I install some game software, it might register over my Internet connection. If I type www.dizney.com instead of www.disney.com, am I in trouble? Does using a computer now require a parental lock-out password to prevent unlicensed children from sending any packets over the wire? How does that work if my child's home directories are stored on a file server that is also my DNS server? Does the password and its behavior live on the file server?

  34. No licence needed... but some accountability.... by geordie · · Score: 2, Informative

    Personally, I think that licences to go online is a completely ridiculous idea. But I can see where the idea stems from.
    There are a lot of users out there who continually get viruses on their system, never patch their systems and never update their virus software( Some of my clients think that updating their virus software every year is being responsible!) and ask them what a patch is and they'll reply that it's something to help you stop smoking!.

    Unless something changes, these same users will continue to get viruses and will continue to annoy other net users.

    I think a better way of approaching it would be to have some form of virus filter at the ISP end. If a user got infected, the filter would turn off their connection ( or limit it to antivirus sites) until they disinfected their system.

    I went through a period last year when one user on a major ISP here in Canada was infected with a virus and I was recieving hundreds of infected emails from them every day. I contacted them directly a number of times but received no response, so I contacted the ISP who refused to do anything. If it was set up to turn off their connection upon infection, then I (And everyone else in their address book) wouldn't have had to put up with all the crap that came from the virus.

  35. Give me a break by Dr.+Transparent · · Score: 3, Interesting
    This is one of the stupidest ideas I've ever heard. Do you really think that a stupid course is going to do anything towards limiting the amount of times users screw up? Half the time people screw up (or more) is because people are lazy. It won't matter if you make someone take a stupid course. They still have to actually do something to prevent problems.

    Furthermore, the idea that a license will solve a problem is just plain idiotic. To suggest that "licensing" people prevent problems is a complete lie. While the author says "motorists must obtain licenses to drive", it is noteworthy that nearly 100% of all accidents occur by licensed drivers. Licensing would just be a new way for someone to tax me and a new excuse for people's own laziness.

    If you want to solve these kinds of problems, build better software and prosecute dumb-ass virus writers and script kiddies like the little punk-ass bastards they are.

    If you enter my house uninvited and threaten me I can shoot your ass dead. Why shouldn't it be the same way when someone breaks into my computer. Prosecute script kiddies.

  36. What we do need! by Cinematique · · Score: 3, Funny

    People should have to get a license to have kids, not to surf the Internet.

    Yeah, I said it.

  37. Just online? by Tom · · Score: 2, Interesting

    Just for going online? There should be a mandatory course for using computers at all.

    Hey, hey - before you mod "Troll", think about this:

    * You can't drive without a license
    * You can't operate heavy machinery
    * You can't practice medicine

    etc.

    We already cover most points where people can do damage to either themselves or others with mandatory education. It makes sense, too.

    It doesn't have to be "elitest". It can be as simple as driving school in most of the US, where you hop in a car with the local sherrif for 10 minutes and show him that you know which pedal does what.

    Of course, computers being more complicated, there's also a different answer. I'll post that in a new reply, so you can mod this one down all you like. :)

    --
    Assorted stuff I do sometimes: Lemuria.org
  38. Re:While we're at it... small tangent by BrynM · · Score: 2, Insightful
    Actually, thats not so bad of an idea... well... anyways the taxing email part.
    The problem with that is people like me with a private e-mail server. Do I have to become a business? Do I have to stop running the server? Do I have to clear every new account with some external authority and provide a paper trail for every user? Do I have to have someone come into my home and audit my server? Am I responsible for the tax if one of my users doesn't pay? Do I have to pay a tax for administrative e-mail I send?

    So far, no proponant of taxed e-mail has been able to give me an answer to those questions short of "you shouldn't be allowed to have a server - no civilian should", which I can't agree with for numerous reasons. Don't get me wrong, the tax idea has merits. I just think it's a pipe dream without some government authority getting draconian and ruining a lot of what makes the internet such an open ended learning experience.

    --
    US Democracy:The best person for the job (among These pre-selected choices...)
  39. screw surfing; they need a license to BREED by iamhassi · · Score: 2, Insightful

    If they're going to start requiring licenses for stupid things then how about a license to breed?? Less stupid people would mean we wouldn't need licenses to surf.

    --
    my karma will be here long after I'm gone
  40. Why make an unenforcable licence? by Kjella · · Score: 2, Insightful

    Come on, noone is going to verify such a licence. If anything, one person in the household will pass and the rest ignore it. Teaching basic computer safety should be part of the general education, as almost everybody that grows up today will be or come in contact with computers.

    Anti-virus - the importance of running one, but also some common sense. Like, if someone sends you an .exe on irc, and asks you to "test" it, would you run it? Trust me, many would.

    Automatic patching - seriously, I run an up2date cron job on my Linux box. What's the big fuzz over Microsoft's automatic updates? Your average desktop doesn't have a testbed anyway, so might as well patch when it's available.

    Firewall - With anything and everything connecting to the net these days, it's growing less and less useful for Joe Average because there's so many programs, they don't know which are good and which are bad anyway. Not to mention some of the biggest virus sources are web and email (read: Outlook and IE), which are allowed through anyway.

    Kjella

    --
    Live today, because you never know what tomorrow brings
  41. The Quote is Wildly out of Context by Bruce+Schneier · · Score: 2, Informative

    This is what will appear in the next issue of Crypto-Gram:

    A recent Associated Press story about licensing computer users has some people believing that I am in favor of the idea of licensing computer users.

    I'm not. Period.

    The idea is that users can potentially do damage with their computers, so why not force them to get licenses as we do for automobile drivers. While this is one potential way to deal with the problem of people having default security configurations and not installing their patches, I think that the damage that would do to the Information Age would be disastrous. And that it is a bad security trade-off.

    It's interesting that people are taking this idea seriously, though. I think that the computer industry has painted itself into a corner. On the one hand, it has positioned computers as a mass-market consumer item. Everyone should own a computer. On the other hand, they have made computers so complex to administer that you need significant training to do it properly. One of the results of this is bad security, which we're seeing.

    But I don't think the solution is to force computer users to be licensed. When I read my quote it's clear to me that I'm not saying that, but I want to correct the impression of anyone who does.

    Bruce

    1. Re:The Quote is Wildly out of Context by Bruce+Schneier · · Score: 2, Insightful

      As I read through the SlashDot comments, it becomes clear to me that some people don't understand how newspaper interviews work.

      Generally they're conducted by telephone. The reporter calls with a story idea. He's looking for information, background, quotes, etc. He asks a bunch of questions and has a conversation with the interviewee. In this case, the AP reporter was writing a story on licensing computer users, and he wanted to know what I thought about it. I spoke with the reporter for about ten minutes about this idea.

      The reporter eventually hangs up. He talks to other people. Then, he writes the story. His job is to string together the facts and quotes into an interesting and entertaining news article.

      I never get to see what quote he uses. I never get to approve the context. I never see the story before it appears in print.

      People are misquoted all the time. Be careful about judging someone by a single quote they say in print, especially if it's something you wouldn't expect them to say. I'm always aware of the high error rate in news stories, but not everyone is.

      Bruce

  42. Re:why bother reporting this? To fight it! by truffle+pig · · Score: 2, Insightful

    You make some Interesting points but I do question one of your major ones.

    You seem to indicate that the biggest problem your customers have is the time, knowledge and effort it takes to load patches for Windows and the solution to end this would be to provide them with Debian or Redhat on their computers. If you can't get people to install updates for Windows how are you going to get them to load updates for Linux, OS X, BSD, Amiga, BeOS or whatever the next hot OS is.

    Neither Debian or Red Hat are going to be set and forget installs. At some point a home computer user is going to have to load updates for thier OS of choice, if the want to help insure the continued security of their computing enviroment. I think you are setting a bad example by implying to your customers and boss, that by loading Linux they will be forever free of having to load updates or be concerned about security of their computer. Things like that are going to get people burned by the next exploit script for Red Hat or Debian that they are not patched against.

    I don't want to take away from the good points of your post. I think you point about Blinding Windows from the Network is an interesting one.

    I can't say that I share you're level of rage against Microsoft I do agree that there is a problem with the closed source method of software distribution but I don't think that there is a OS today that is the single solution to all of these security problems. At some point there needs to be a balance between better products both open and closed source and better process and computing habits on the part of all computers users, not just the "stupid" ones. The latter is needs to invlove educating people with the best way to keep their computers up to date with patches, good password practices, good firewall setups, and smart email practices to help protect against spam and other email born threats.

  43. MS' proposed 'cure' worse than the disease by The+Monster · · Score: 2, Insightful
    Viruses and the holes they exploit are the responsibility of the programmers, and they are in a better position to fix these problems rather than trying to distribute the responsibility to users.
    Well, here's what the article says about that [emphasis mine]:
    To combat threats, software companies have been trying to make technology easier to use -- Microsoft Corp., for instance, is considering automating the download and installation of software fixes. No user intervention required.
    Think about this, folks.
    Think very, very hard about it.
    I'll wait.

    . . .


    Did you get it yet? Isn't installing programs without user intervention the PROBLEM? What happens when a cracker compromises a machine in a position to play Man In The Middle? and some of the 'software fixes' you get are actually worms?

    I'm sure that part of the scheme will include installing the pubkey of MS' software update authority, and code that refuses to install a patch not signed by the corresponding privkey. But I am confident that someone will eventually find a loophole in the implementation and be able to impersonate MS to the computers.

    And in the meantime, in the guise of fighting viruses, MS gets to absolutely control all software on your computer.
    Did you know that Open Office, Mozilla, and the GIMP are viruses? (Remember that MS is already on record as describing certain license terms as 'viral'.)

    --

    [100% ISO 646 Compliant]
    SVM, ERGO MONSTRO.

  44. Re:fsck those 4$$|-|013$ by The+Spoonman · · Score: 4, Insightful

    Why do you think Linux doesn't have these security holes?

    You're an idiot if you don't believe Linux has these security holes. It does, just try reading the changelogs of the kernel, of apache, of ssh, of most of the apps you use. They're there. The simple fact is that Linux isn't as wide-spread as Windows, so when there's a hole in Windows, it's exploited on millions of boxes. When one is found in Linux, it affects a very small number, so no one cares. Once Linux becomes widespread, you'll start to see the same kinds of issues, because there will always be hackers. It will also be a lot worse, because Windows is easy to patch, and it still isn't done...Linux, OTOH hand will always be beyond the capabilities of my grandmother. At least with Windows Update, she can keep her computer moderately safe.

    As for buggy code, fuck, dude...the one that was responsible for blaster affected W2K, which is just under four years old. I, for one, am not about to wait for four years of testing to ensure EVERY fucking bug is found. Linux is also not immune to bugs, there are plenty to be found if you just open your eyes. And, don't give me the stale rhetoric of "well, if one is found, it's patched within 24 hours", that might be true, but the patch for blaster was released a full month before the problem.

    Nope, I fear the day that Linux becomes the dominant OS. Things will only be much, much worse. Especially with dumb-ass pricks like you who a) don't help people fix their machines, you just whine about "well, it's your own fault, grandma, you use windows!" and b) are ignorant of the flaws in this system you love so much. It makes you immeasurably more ignorant and naive then they are!

    --
    Which is more painful? Going to work or gouging your eye out with a spoon? Find out!
    http://www.workorspoon.com
  45. Diversity the real fix by k12linux · · Score: 2, Insightful
    I'd like to argue that lack of diversity on the Internet is a much bigger problem than users who don't patch weekly.

    Having everyone running the same version of "secure Linux" with "the perfect web browser" and "the perfect e-mail client" isn't the answer to viruses and worms. A homogonous computing landscape like that might eliminate nearly all viruses and worms. BUT if a hole was found, the virus that exploits it would spread like wildfire. Users would be less careful because they think they can be, and with everyone running the same thing, everyone would have the same vulnerability.

    That's why we need diversity on the Internet. We need a lot more diversity than we have now. As long as the unwashed masses are running Windows with Outlook, MS will have to have 100% security in their products. Anything less is asking for the problems we have now. And so far MS is nowhere near 100% in that regard.

    That is why we need Linux.. and BSD and OS/X. That's why we need competition. That's why we need multiple Linux distributors who ship with different compiler settings that they think are "best." That's why we need to have choices of web browsers and e-mail clients.

    That is why CHIOCE is a good thing when it comes to operating systems and software. Real choice breeds diversity. Believe me, if there were real choices, people would NOT all make the same one. (Real choice does NOT mean having only one OS ship on all PCs with only a single mail client pre-installed and a single web client pre-installed!)

    Having choices that work together are why open formats and open standards should be in the headlines (not the crap like this article on user licenses.)

    If file formats and network protocols were required to be open, it would eliminate many of the problems we face. Over the past 20 years, incompatibility between formats or protocols has been the #1 thing that I've seen cause people to change their OS. It has also been the #1 cause that I've seen for a change in the software they used.

    How many companies are running MS-Office because they "need to be compatible" with customers or corporate? How many switched from WordPerfect for that very reason? How many articles have you seen that review OpenOffice and the #1 complaint (sometimes the only complaint) is incomplete or inconsistent ability to open/save MS-Office files? How many perfectly good software products have vanished because they weren't compatible with propietary products?

    If file formats and network protocols were open, then Microsoft would have the chance to do what they are always claiming they want. They'd have the level playing field they always tell the press they want. The level playing field they claim open source advocates try to deny them by trying to pass laws requiring "considering" open source software in government.

    In the real world, biodiversity keeps the first fatal disease from coming along and wiping out the entire population. On the Internet software-diversity would do the same thing with viruses and worms. Sure, a virus might still do damage to a section of the population, but it wouldn't have nearly the impact that one does now.

    So, software-diversity is critical to the future of the Internet and open formats and standards are needed for it to exist. Maybe it's time for everybody to start demanding these things from their software. And maybe it's time for legislation to demand that software companies open formats and protocols enough to be interoperable... at least if their product has a significant market share.

  46. Re:fsck those 4$$|-|013$ by Jord · · Score: 2, Informative
    Do you really believe this crap or are you just spewing? Do you really think that Windows is the dominant operating system on the net? It may be the dominant operating system on the desktop at the moment but it sure as hell is NOT the dominant operating system for web servers and other servers.

    If there were MASSIVE security holes in Linux as there are in windows you can bet your ass that these script kiddies would be all over them like a fly to dung. Linux IS more secure than Windows. Believe what you want but the facts speak for themselves. And yes there are other operating systems out there that are more secure than Linux but this "windows is more popular and that is why it gets the attention" line of bullshit really needs to stop. Check your facts before you spew this crap. It is really getting old.

  47. Geek cred. by Johnny+Mnemonic · · Score: 2, Insightful


    There used to be a minimum amount of computer knowledge that was required to get online. It's once the bankers and marketers invaded online space, and tried to make it available to the unwashed consumer masses, that we started having all these issues. Returning the internet to the geeks, who were largely self-policing, would do away with the vast majority of problems.

    Doing away with DNS would cure most of the issues, I think. How about having to remember the IP address for every site that you visit? If that's not enough, require three lines of CLI input before going anywhere. That'll stop the issues cold.

    I'm only half-kidding, actually. These assholes that broke our internet want to certify us to get back onto it? Maybe they should just be dis-invited.

    --

    --
    $tar -xvf .sig.tar