Rick Moen wrote:
[1] Put simply, NoScript _inverts_ Web browsers' default behaviour of being willing to run any JavaScript snippet on any page from any FQDN, by making that become default-no. [...]
Perhaps more concise: "NoScript makes js opt-in (instead of opt-out)."
I saw this problem when I asked such people about the process list. Blank expression. 'Process list. You know, the process list. ps and all that.' Complete and total non-comprehension.
Swap in a new user (that one is broken). Good rant. I'm reminded of some posts on Schneier's blog (as always, since I inhaled the backlog over the last three months). In particular, http://www.rickwash.com/papers/rwash-homesec-soups10-final.pdf ...the key take home of which is most people think "no one will attack my computer because I'm not a bank", which is wrong. Also http://www.schneier.com/blog/archives/2013/03/security_awaren_1.html [...] The risks of not washing your hands are low, and it's not easy to tie the resultant disease to a particular not-washing decision. Computer security is like hand washing. [...]