User Education Is Not the Answer to Security Problems

[email protected] (Jakob Nielsen) Mon, 25 Oct 2004 01:30:00 -0700
Newsgroups gmane.comp.web.alertbox
Message-ID <SPARKLIST-7313542-3300300-2004.10.25-01.30.01--gcwa-alertbox#[email protected]>
Jakob Nielsen's Alertbox for October 25 is now online at:
   http://www.useit.com/alertbox/20041025.html

Summary:
Internet scams cannot be thwarted by placing the burden on users to
defend themselves at all times. Beleaguered users need protection,
and the technology must change to provide this.

------------

User Experience 2004 conference

   > Amsterdam, November 1-6
   > 33 full-day tutorials
   > Don Norman's keynote on his new "expectation design" theory
   > My keynote on how past guidelines held up in new user testing

More info and full program:	
   http://www.nngroup.com/events

Deadline to save 200 Euros by advance registration: this Saturday Oct. 30

------------

Email received from my bank (Citibank):

"Never type account information into a pop-up window. Don't type account
information into a pop-up window, even if it looks legitimate. We never
request account information through pop-up windows."

Another nail in the coffin for pop-ups. RIP. They had some uses in the
past, but now they are indelibly associated with scams and unpleasant
types of content that can't be mentioned here for fear of triggering
filtering software.