Security updates. Who cares?

1 August 2012 Information Security

Commenting on results of a US survey that found almost half of consumers are failing to update their software regularly, SecurEnvoy says this highlights the fact that there are lot of consumers out there who don’t know – and probably don’t really care – how their computers work.

According to Steve Watts, co-founder of the tokenless two-factor authentication (2FA) specialist, there is a clear analogy here with the motor car – but unlike cars where there are a host of motoring associations that can assist in the event of an electrical or mechanical problem, there is no Automobile Association for computers.

“It’s fascinating to learn that 25% of adults don’t clearly understand what software updates do – and given that PCs are now as mainstream as the car – should we really expect them to? The solution lies in developing security systems that are as transparent as possible to use, and ensuring those solutions are as easy to use as possible,” he said.

“This isn’t as curious as it sounds, as if we regard the PC as a terminal to the Internet – as it clearly is for many users – then provided we ensure that the risk from malware is as low as possible, and then ensure they are able to securely log into their online banking or similar service, the risk to the user is significantly reduced.”

Watts went on to say that while most companies clearly need to raise their security game, and keep it that way, there is an arguable case for relatively simple consumer usage of computers not to update their software.

It’s not a perfect situation, he admitted, but there are millions of car drivers out there who haven’t a clue what happens under the bonnet or how to change a wheel, but they get by with the assistance of a `man who can’. If malware can be kept at bay, and they can use their mobile phone as their authentication medium, their online banking and similar sessions will be as secure as possible.

“As we move to mass market PC ownership, it becomes clear that the traditional and security aware users of a computer are going to give way to someone that does not, as this survey identifies, understand how their PC actually functions, let alone know how to update it, so we, as an industry have to develop easy-to-use security that is foolproof as possible,” he said.

“Our approach to authentication is based on this principle. Rather than use a hardware token that frightens the average Joe off, consumers can use their mobile phone as the authentication vehicle. They may not understand how tokenless 2FA works, but they will follow the easy instructions, and that’s a perfect solution for all types of PC user – regardless of their level of expertise,” he added.

For more on the latest international survey on attitudes to software updates: http://bit.ly/SQHupm

For more information, visit www.securenvoy.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Want effective Attack Surface Management? Think like an attacker.
Information Security
Effective ASM requires companies to think like attackers, anticipate risks, and act decisively to reduce exposure by knowing their environment, deploying a structured approach, leveraging capable tools, and addressing both internal and external risks.

Read more...
The growing role of hybrid backup
Infrastructure Information Security
As Africa’s digital economy rapidly grows, businesses across the continent are facing the challenge of securing data in an environment characterised by evolving cyberthreats, unreliable connectivity and diverse regulatory frameworks.

Read more...
POPIA non-compliance puts municipalities at risk
Information Security Government and Parastatal (Industry)
Digital responsibility must go beyond POPIA compliance to recognising that privacy and service delivery are fundamentally linked. Despite this, only 51 out of 257 municipalities submitted their mandatory data protection and access to information reports in 2024.

Read more...
Choicejacking bypasses smartphone charging security
News & Events Information Security
Choicejacking is a new cyberthreat that bypasses smartphone charging security defences to confirm, without the victim’s input or consent, that the victim wishes to connect in data-transfer mode.

Read more...
Most wanted malware
News & Events Information Security
Check Point Software Technologies unveiled its Global Threat Index for June 2025, highlighting a surge in new and evolving threats. Eight African countries are among the most targeted as malware leaders AsyncRAT and FakeUpdates expand.

Read more...
Welcome to the new cyber battleground
Information Security
The Iran-Israel conflict is rapidly redefining modern warfare, pushing the boundaries of cyber capabilities and creating a new, borderless digital battlefield. Fortinet’s CISO, Dr Carl Windsor, offers a critical, in-depth analysis of the escalating tactics and global implications in his latest report.

Read more...
African industries may overestimate cyber defences
Information Security
A significant perception gap exists in security awareness training: 68% of leaders believe training is tailored to roles, yet only a third of employees feel adequately trained. Many organisations only conduct annual or biannual generic training that may not effectively change behaviour.

Read more...
SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.