Slashdot Mirror
Consumers Prefer Security Over Convenience For the First Time Ever, IBM Security Report Finds (techrepublic.com)
A new study by IBM Security surveying 4,000 adults from a few different regions of the world found that consumers are now ranking security over convenience. For the first time ever, business users and consumers are now preferring security over convenience. From a report: TechRepublic spoke with executive security advisor at IBM Security Limor Kessem to discuss this new trend. "We always talk about the ease of use, and not impacting user experience, etc, but it turns out that when it comes to their financial accounts...people actually would go the extra mile and will use extra security," Kessem said. Whether it's using two factor authentication, an SMS message on top of their password, or any other additional step for extra protection, people still want to use it. Some 74% of respondents said that they would use extra security when it comes to those accounts, she said.
Because you know that some dumbass in the home office is storing their admin passwords in cleartext for everyone to see.
The security auditors always focus on things like crazy password policies and front end security scans, but it's always something stupid like what I mentioned above that screws it up for the rest of us.
The answers are meaningless -- actions speak louder than words. What these survey takers have done is found the right question to ask that 4000 people knew the "right" answer to, and they got the "right" answer even if it didn't match reality. It's called "push polling". The only true way to say that people prefer security over convenience is by counting the number of people who actually USE security that gets in the way of them doing what they want to do.
For example, I am right now trying to recall the password for a gmail account. I can't remember when I created the account, I don't remember the only password the account has ever had so I can't tell them what one of the old passwords was, and even though I enter the code they send me by email they refuse to believe I am me. Right now, security is getting in the way of getting something done.
I've worked with end users for 25 years. Security over convenience? 100% BULLSHIT. Not a chance.
Does this mean people will move on from Windows XP and IE 6? About time.
Then people wouldn't use the same damn password on most of their accounts.
“Common sense is not so common.” — Voltaire
complete and utter bullshit. They will happily say that in a survey but when push comes to shove the majority choose convenience over security. this applies to passwords, device configurations and just about any aspect where their is an option that allows convenience.
Some 74% of respondents said that they would use extra security
I'll believe this when that actually start doing it.
People in surveys say all sorts of things. What they actually do is often entirely different. And what they will do in the long term is entirely different again.
politicians are like babies' nappies: they should both be changed regularly and for the same reasons
versus what they will do. Anyone can say they prefer A over B. But when the time comes will they really choose A. There are many companies out there that have been burned when market research said one thing, but what the customer did was something else. I guess what it comes down to is marketing and advertising. A fear campaign would work. Maybe.
putting the 'B' in LGBTQ+
They asked a guy named Bob Consumers and he thought security should be more important than convenience. Bob Consumers is an only child.
Been preaching this for 10+ years: Usability and security are allies, not enemies.
If your usability is good, your users make less mistakes, which leads to less unintentional issues.
Phishing is largely a usability thing. I have a couple slides about that, the very short version is that all the info you need to spot a phishing mail is typically hidden, while all the info that lures you in is prominent.
Proper decision making by users can be guided through usability, to prevent them from doing stupid things.
User feedback of most security apps is abysmal, to say it nicely.
There are great examples of usability and security working together. I still wonder why nobody picked up the Chamaeleon concept, for example (basically: A set of user-configurable domains running under one windowing system, with colored borders indicating for every window which domain it belongs to).
Usability needs to be designed into security. We are failing our users with this bullshit 80s attitude of blaming their stupidity.
Assorted stuff I do sometimes: Lemuria.org
And they like a bold, rich roast too (Yeah, it's Malcolm Gladwell, but the ideas aren't his so it's all good).
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
I used to be a dysfunctional child and now prefer reduced functionality caused by tight security. Privacy Badger is my latest ally in fighting 'the man'.
When you get to a web page full of blanks that doesn't make a lot of sense you get to realise how much we are being taken for a ride.
Pictures, videos, tables can be tracking us, they used to be called viruses.
Now it is just accepted as normal for companies to automatically provide us with what we want to experience.
Go well
Your link to TechRepublic also leads to 18 potential trackers
and yes, my blocking broke the video which probably says no more than the text.
Go well
If the people with preferences do not have the ability to assess if their preferences are being met, they will still use shitty products.
That is an incredible analogy fail. What you are talking about is security vs no security. A correct analogy would be do they prefer a lock that is easier to use and trivial to bypass over one that is slightly harder to use but nontrivial to bypass. That being said the study only tells us what they say, not what they do. Ask any Christian if they prefer to go to Heaven or Hell and they will say Heaven. An analysis of their behavior will often uncover an incongruence however.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
That is because you don't know what two factor means.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
The problem is they ARE NOT in the mindset. They simply know what to say on a survey or think they are really in the mindset. In actuality while they care about security it simply is not as important as having an easy to remember password or being able to access that phone faster to get to their urgent game/tweet/facebook post. I would truly love people to actually get it and would celebrate if they did but I work in security every day and I see people even in IT and security that don't get it. convenience is just more important to them up until something goes wrong.