From: "Geo." 

I still see user and system security as separate issues. I deal mostly with
securing servers on the internet where users are customers so I don't have
the option of training or patching the user. I only get to deal with the
machines so perhaps this affects my pov.

Geo.

"Rich"  wrote in message news:3e348e6e{at}w3.nls.net...
   That is the root of many problems.  You can't get people to do things
they should nor stop them from doing things that shouldn't.

   As for where things start, it has nothing to do with user or computer
since the start, in the context in which you questioned it, would be with
the sending of that email since that is the first step involving the person
being attacked.  If you want to look from the perspective of the attacker
then that could be any time prior and you get into the psychology of why
someone chooses to be malicious.

Rich

  "Geo."  wrote in message
news:3e3486e7$1{at}w3.nls.net...
  "Rich"  wrote in message news:3e3438ec{at}w3.nls.net...

  >   In example #2, if someone sent to an email instructing you to go
against
  your interest and open malicious web page, that would be the start as that
  is the first step that involves the person being attacked.<

  Yes but are you hacking the machine or the user? Trojans exploit the user
  not a component of the computer. You can't patch a user.

  Geo.

--- BBBS/NT v4.01 Flag-4