Originally Posted by Mhurron  |
If you were up-to-date on your patches, you wouldn't have had a problem. The exploits that both of these waves used were fixed weeks or months before they were exploited.
Honestly, users have no one but themselves to blame. |
Heck, in the second round of hackings, somepage got infected with the exact same RealPlayer exploit as before. The
same site with the
same exploit ... and even though there was mass panic about it the first time it happened there were still tons of people who never bothered to figure out what they could do to protect themselves and
kept using the site. SE spoke with the site owners and that made everything ok I guess. It's like Dr Square came in and said "We've talked one of your sexual partners and they've agreed to seek treatment for their syphillus," and the userbase went "Great! Now I can go back to having unprotected sex with them and four other people!"
Which is exactly what's wrong with this update, or rather the reaction to it. SE has done something,
a thing, so people are going to assume that they're safe when they're still
very much not and continue to visit frequently compromised sites with unsecure browsers and a bunch of useless software on their system with year old security loopholes. Some of them won't even use the virtual keyboard, I bet, and when they get hacked they're going to say SE should have done
more.
_______________
And now I'm officially a security snob like Mhurron and Feba.