Okay, I've been thinking about his one for some time.
There has been the press recently (
here and
here) many stories about how many computers are just zombies that spew spam out over the internet and although I know at least some of these infections couldn't be avoided the vast majority could be by the use of up-to-date firewall, anti spy ware and antivirus software.
The problem is that people who own PC's are not necessarily computer literate and with the growth of BB and places like PC world, more and more people are buying PC's. People who want the PC so that they can play the latest games or even just to send emails to their family but know absolutely nothing beyond how to turn it on and open outlook and internet explorer. Even worse are the those that do have some knowledge but just don't care. I remember taking to one guy in the office of a hire car company (As I was waiting for my car to come into the yard so that I could pick it up.) "I don't bother with a firewall or anti virus, its not mucking up my system so who cares." was his take on the issue. The problem is that he is very right. The vast majority of today's viruses etc do not really harm the users PC. The damage the do is spread out over many thousands of users
I think that it's time that we stopped selling PC to any Tom, Dick or Harry who walks through the door of a shop and started being more responsible. After all, we can't sell hand guns full stop and shotguns only after a number of checks. Your only allowed on the road on your own once you've passed the driving test.
Why should a computer be any different. If you computer is just a Zombie then it could be used to hold up an online poker site as part of a DOS attack or used to send out 1000's of emails telling the local bank customers that there passwords need to be reconfirmed. In both cases your PC would be an accessory to a crime but at the moment, you do not get held responsible. Your PC could also send out Millions of adverts for Fiagra, the better version of viagra to every one in your town but again, you would not be held responsible. Your ISP may restrict your access to the internet and make you clean up the malicious software on the PC but you will not then be taken to court by anyone for the spam that was spread.
The solution I've been thinking about is two fold.
1. If you buy a new PC then you should be offered 2 or 3 hour long training course's on internet security, how to use the software, how to spot obvious email viruses etc. The costs could probably be defrayed by the inclusion of a section on P2P software and not sharing music on line.
In addition to this, all new PC's would be sold with a firewall, antivirus and antispyware/trojen remover with a years subscription
pre-loaded and
pre-configured to auto update every 24 hours and/or each time the PC connects to the internet. The firewall could be the XP firewall (I don't personally rate it but its much better than nothing), the anti virus could be AVG and the anti trojen/spyware (Ad aware ?) could well be shareware or the like so there is little/no additional cost to the consumer. If you wanted a PC without this then you'd have to sign a waiver absolving the vendor of any responsibility for antivirus and firewall once it leaves the shop.
2. A change in the law to make people responsible for their PC's being involved in DOS attacks, spamming, phisting and all those other nasty little things you can do with a zombie PC. Provided it can be shown that you have taken reasonable steps to avoid contamination then you are fine. if however, your computer is checked and it is found that you have disabled the firewall or not bothered to keep it up to date then you should be taken to court and fined (probably up to £1000). You would also have to attend the course mentioned in 1 and your PC would be barred from being re-connected the internet until it has been fully cleaned.
Those who initially don't have a clue will probably be quite thankful that someone took 5 minutes to explain things. And as for those who are just irresponsible then the fine ought to make them see the error of their ways in fairly short order.
I think this would be something that could work because just sitting back and leaving the 'market' to go and buy anti virus products etc clearly isn't working and its time that we stopped allowing lack of knowledge and ignorance as an excuse for the vast amount of spam and DDos attacks that are now occurring.
What do people think ? I'm not really looking for suggestions like you could never police this and it could never happen but the idea in general. Am I insane ? Am I speaking sense ? answers on a postcard to...
Scarlett.