
A breakdown in communicationsĭespite having the advantage of having grown up with computers and information on securing them, how is it that these people have fallen victim to certain patterns of attacks? And from the information security practitioner’s side, where exactly is the disconnect occurring between what we’re telling people to do (or not do, as the case may be), and what they are doing (or, again, not doing)? These people grew up digitally literate and have had access to advice and discussions about safe computing practices available since pre-school. I also suspect they are younger than the average WeLiveSecurity reader. One thing I should point out is that both the Discord and Reddit services skew to a younger demographic than social media sites such as Twitter and Facebook. These types of questions also come up in online chats on various Discord servers where I volunteer my time as well.

I should state this is not something unique to Reddit’s users. Attacks these days are usually financially motivated, but there are other unanticipated consequences as well. In those subreddits, I have helped people over and over again as they attempted to recover from the fallout of compromised computers. But that is not the only place I participate online: for a little over three years, I have been volunteering my time to moderate a couple of Reddit’s forums (subreddits) that provide both general computing support as well as more specific advice on removing malware.

I have been a reader of Neowin for over a couple of decades now, and a member of its forum for almost that long.

As far as computer security advice goes, this seems like it should be fairly simple to practice.īut even when such advice is widely shared, people still download files from distinctly nonreputable places and get compromised as a result. One of the pieces of advice that security practitioners have been giving out for the past couple of decades, if not longer, is that you should only download software from reputable sites. Why do people still download files from sketchy places and get compromised as a result?
