OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Consumer Security Web Site

From: James D. Stallard (jamesleafgrove.com)
Date: Mon Jun 28 2004 - 16:25:08 CDT


David

Top Idea, this certainly qualifies as 'A Good Thing'.

My 2 cents is "how to pick a decent password"

There are lots of myths out there on what qualifies as a good password and
while all us techies would love our users to pick something really complex
(read "nasty") the fact remains that they would rather pick the name of
their dog or football team. So, a few tips on choosing something easy to
remember and hard to crack, and obfuscating their dogs name might be nice :)

Most of my work is Active Directory design related, so a few tips on using
GPOs for improving security and securing DNS services would be nice. Perhaps
you couls really push the boat out and put in some stuff about Delegation of
Administration!

Cheers

James D. Stallard
Active Directory and Infrastructure Technical Architect
Leafgrove Limited
 

-----Original Message-----
From: David Harper [mailto:david.harperthermon.com]
Sent: 28 June 2004 16:50
To: 'focus-mssecurityfocus.com'
Subject: Consumer Security Web Site

All,

I'm putting together a web site for home and small office computer users to
address computer and small network security. I'm hoping to eventually have
a one-stop site where non-technical consumers can get all the information
they need to protect their home and small office systems.

So far I'm planning sections on Viruses/Worms/Trojans, Spam, Identity Theft,
Cyberstalking, Hacking, Spyware and Adware. Each section is to cover the
basics (what it is, how to remove/prevent it, etc.) in a non-technical,
friendly-to-the-average-home-user way. I'll also include links to sites
like Windows Update and other free tools, with a strong admonition that
their computer be checked and patched - now.

I'd like to get input from the list on any other sections to include on the
web site. What do you see as the most glaring gaps in end-user knowledge?
What information, tools, links, etc., would best enable them to secure their
systems easily against the most common threats? Also, I'm gearing this
toward Microsoft simply because 1) Microsoft runs the vast majority of
home/small-office computers, 2) Those using Linux are already pretty
computer savvy, and this site is for the novice. Should I expand the focus?
Include MACs? What about the buzz on cell phone viruses? Should cell phone
security and privacy issues be included, as well?

Please keep in mind that this site is for the novice, so explanations of
elliptical curve cryptography probably won't fly. I just want to make it as
easy as possible for the non-technical user to stay up to date.

Your input is greatly appreciated!

Thanks,
David

---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------