Chicken or the Egg

Marcus Ranum put together a nice list of dumb ideas in computer security, and I have to agree with all but one – that is educating users.

The fact is (and Marcus states it as well) that new computer users will likely have preconceived notions about online threats, and they will be more careful as a result. I say those notions come from education – getting the word out whether existing users heed it or not.

Like the tree falling faraway from a human that could hear it, is the obvious really so if nobody actually states it?