Security updates. Who cares?

1 August 2012 Information Security

Commenting on results of a US survey that found almost half of consumers are failing to update their software regularly, SecurEnvoy says this highlights the fact that there are lot of consumers out there who don’t know – and probably don’t really care – how their computers work.

According to Steve Watts, co-founder of the tokenless two-factor authentication (2FA) specialist, there is a clear analogy here with the motor car – but unlike cars where there are a host of motoring associations that can assist in the event of an electrical or mechanical problem, there is no Automobile Association for computers.

“It’s fascinating to learn that 25% of adults don’t clearly understand what software updates do – and given that PCs are now as mainstream as the car – should we really expect them to? The solution lies in developing security systems that are as transparent as possible to use, and ensuring those solutions are as easy to use as possible,” he said.

“This isn’t as curious as it sounds, as if we regard the PC as a terminal to the Internet – as it clearly is for many users – then provided we ensure that the risk from malware is as low as possible, and then ensure they are able to securely log into their online banking or similar service, the risk to the user is significantly reduced.”

Watts went on to say that while most companies clearly need to raise their security game, and keep it that way, there is an arguable case for relatively simple consumer usage of computers not to update their software.

It’s not a perfect situation, he admitted, but there are millions of car drivers out there who haven’t a clue what happens under the bonnet or how to change a wheel, but they get by with the assistance of a `man who can’. If malware can be kept at bay, and they can use their mobile phone as their authentication medium, their online banking and similar sessions will be as secure as possible.

“As we move to mass market PC ownership, it becomes clear that the traditional and security aware users of a computer are going to give way to someone that does not, as this survey identifies, understand how their PC actually functions, let alone know how to update it, so we, as an industry have to develop easy-to-use security that is foolproof as possible,” he said.

“Our approach to authentication is based on this principle. Rather than use a hardware token that frightens the average Joe off, consumers can use their mobile phone as the authentication vehicle. They may not understand how tokenless 2FA works, but they will follow the easy instructions, and that’s a perfect solution for all types of PC user – regardless of their level of expertise,” he added.

For more on the latest international survey on attitudes to software updates: http://bit.ly/SQHupm

For more information, visit www.securenvoy.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Managed security solutions for organisations of all sizes
Information Security
Cyberattackers have become significantly more sophisticated and determined, targeting businesses of all sizes. PwC’s Global Digital Trust Insights Survey 2025 Africa and South Africa highlights the urgent need for organisations to implement robust cyber risk mitigation strategies.

Read more...
Multiple IoT devices targeted
Information Security Residential Estate (Industry)
Mirai remains one of the top threats to IoT in 2025 due to widespread exploitation of weak login credentials and unpatched vulnerabilities, enabling large-scale botnets for DDoS attacks, data theft and other malicious activities.

Read more...
Local-first data security is South Africa's new digital fortress
Infrastructure Information Security
With many global conversations taking place about data security and privacy, a distinct and powerful message is emerging from South Africa: the critical importance of a 'local first' approach to data security.

Read more...
Sophos launches advisory services to deliver proactive cybersecurity resilience
Information Security News & Events
Sophos has launched a suite of penetration testing and application security services, designed to identify gaps in organisations’ security programs, which is informed by Sophos X-Ops Threat Intelligence and delivered by world-class experts.

Read more...
Kaspersky highlights biometric and signature risks
Information Security News & Events
AI has elevated phishing into a highly personalised threat. Large language models enable attackers to craft convincing emails, messages and websites that mimic legitimate sources, eliminating grammatical errors that once exposed scams.

Read more...
Software security is a team sport
Information Security Infrastructure
Building and maintaining secure software is not a one-team effort; it requires the collective strength and collaboration of security, engineering, and operations teams.

Read more...
Stronger cloud protection
Kaspersky Information Security Products & Solutions
Kaspersky has announced the release of an enhanced version of its Kaspersky Cloud Workload Security, delivering advanced protection for hybrid and multi-cloud environments.

Read more...
AttackIQ enters South Africa with key appointment
Information Security News & Events
AttackIQ, a provider of continuous security validation and exposure management, has announced its entry into the South African market with the appointment of Luke Cifarelli as its country manager.

Read more...
Managed security solutions for organisations of all sizes
Information Security News & Events
Cyber attackers have become significantly more sophisticated and determined, targeting businesses of all sizes. PwC’s Global Digital Trust Insights Survey 2025 Africa and South Africa highlights the urgent need for organisations to implement robust cyber risk mitigation strategies.

Read more...
Data resilience at VeeamON
Technews Publishing SMART Security Solutions Infrastructure Information Security
SMART Security Solutions attended the VeeamON Tour in Johannesburg in August to learn more about data resilience and Veeam’s initiatives to enhance data protection, both on-site and in the cloud.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.