Quote:
Originally Posted by vox_rox
Well, I still don't see how this has anything whatsoever to do with american national security. It wouls seem to me that as long as all government ans military computer installations, as well as publicly funded systems were all protected, then whatever else happens is moot. who cares if someones mother doesn't have a virus checker and ends up unwittingly sending malicious code here and there.
|
I care. Because that malicious code spreads to other computers, and these can be used in DDOS attacks, as has happened in the past. That option costs a lot of time and money, and can be stopped by proper security measures.
If you want a more dangerous scenario: Suppose your mother's computer gets infected with a virus written by a terror group. By this route, you get infected by this new and unknown virus. You happen to be a government official with access to sensitive information, and you happen to use a VPN connection to that computer. Using keyloggers, the terror group now has access to your computer's password, and access to that VPN connection.
Is this scenario likely? Nope. But if terror groups are as dangerous and hightech as some CIA guys claim (I don't think they are, by the way), then this will happen eventually. The goal is to go for the weakest link, and if that link happens to be your mother, so be it.
Quote:
Originally Posted by vox_rox
Now, working from the ISP perspective, there may be room to implement things at that point, but that is the furtherst down the chain such concepts will ever go.
|
I also think makers of operating systems will be "asked" to follow certain guidelines and safety protocols when designing their new software. The government could easily demand that any government-owned computer has to meet those regulations. Software companies are then pretty much forced to implement them, or lose a large customer.