Do we need computer competence tests?
Reverse into parking space, leave laptop on back seat
Posted in Management, 21st January 2008 11:06 GMT
Watch Now : Virtual Machine Movement with Hyper-V
Column Indignation is the immediate response if you suggest to any computer user that they should be given a licence to use their PC only if they pass a test. Why is this?
When someone crashes a car on the motorway, naturally, our first response is to utter words of sympathy: "Oh, hope they're not hurt..." - but what we're actually thinking is: "If that twit had driven carefully, I'd be able to catch my flight!" And it was amazing how many people who arrived at Heathrow after the BA flight from China crashed into the mud before the runway, didn't say - even on camera! - how glad they were that there were no fatalities. No - they complained about the lack of "proper counselling" rooms and moaned about how nobody seemed to have time to stop and "give clear directions" about where they could find coffee and an internet link and "why were they being charged, when it wasn't their fault?", and was this what London was really like?
But the presence of idiots online is at least as disruptive to everybody's lives.
Every time some kid clicks on a phishing link and invokes a Trojan program, or some greedy idiot agrees to send their bank details to a bunch of crooks in Israel or Russia in the hope of getting hold of illegal cash, their computer gets compromised, and joins the army of "bots" which mean that legitimate businesses are fleeced of terrifying amounts of money by organised criminals.
The thing is that of course you can't prevent this sort of thing happening, any more than you can utterly end death on the road by insisting on regular car tests. There will, always, be some antisocial "libertarian" who will argue that "If I want to buy a computer and use it as I see fit (within the bounds of the law) then why shouldn't I?" - as if asking the question provided the answer.
And if such people are confronted with a change in the law, they'll simply disobey it. People drive cars today without licence, without roadworthiness papers, without insurance. Not surprisingly really, when you consider how often someone is hauled into Court for driving without a licence, and as punishment is banned from driving for six months!
The thing is not the inevitability of a few idiots. It's the sheer number of people let loose on full-power, open operating systems capable of running absolutely any software at all. Do they know how to find and eliminate malware? No! Are they running up to date anti-virus software? No! Could they actually detect a fault in their security package? No!
I think anybody with a reasonable grasp of these basics should be allowed to drive a PC. What I can't see is what we gain by allowing everybody else onto the internet in the equivalent of a 30-ton truck, without the slightest idea of what damage they can cause.
So when will we admit that it isn't a blow against the Electronic Freedom Foundation to say: "Unlicensed users can use secure browsers on restricted 'information appliances' for surfing. But anybody who wants to run a machine that can be compromised has to demonstrate a minimum competence"?
The whole idea is utterly repugnant to anybody brought up on the early microcomputers, or the mainframes before those days. I myself can remember leading a spirited debate at Imperial College, arguing that hacking should never, ever be made illegal. To be sure, making it illegal has had few serious consequences for any hackers, and the Computer Misuse Act won't prevent any virus writer from experimenting... so in that sense, I suppose the argument was worth debating! - but I no longer hold those views with the same simple clarity I perceived then.
Is it possible that in a decade, we'll ask how on earth the Netizens of the 20th century tolerated the mayhem that goes on online?
The answer may have something to do with whether we can agree (as a society, Mrs Thatcher) that people actually have rights to the internet. If we can agree what those rights actually are, then maybe we can agree what abilities ought to be restricted to those who can demonstrate competence.
For example, a "sandbox PC" running only licensed software; what would it be limited to? We don't seem to have a list. Should it be able to run email? If so, how many emails should it be allowed to originate in one day without paying an email premium? Surely, if ISPs limited CC emails to 20 a day and charged 1p per email CC thereafter, most spam would dry up?
In exchange, perhaps we could insist that who we send emails to, and what they contain, is entirely confidential without some evidence of criminality?
What about games? Is it really a blow against human rights to suggest that if you can afford a machine with a kilowatt power supply and a dual-core video card, you can also afford to register the thing and its IP address as a danger to the web? - and that if you don't want to do that, you probably don't really care about gaming? And if in exchange, society agreed that we have a right to complete anonymity when posting in moderated forum sites, would we not have gained something?
Most important, can we design a sandbox PC, which does what most of us want (visiting Facebook, managing photographs and videos and music, searching the web for news and chat) but which can only run other software when recognised by the ISP which provides our web link?
Now, I know the answers to almost none of these questions. But I think the time has come to start asking them, seriously, and to start answering them without kneejerk reactions.
For the web to be a freer place, it may be that the freedoms we have already lost, may be traded against liberties which are of no use.
It is, surely, a loss of liberty to say "You can't buy a Formula One racing car and drive along the motorway at 200 mph" - but how important was that freedom, really? And are we doing something equally daft in insisting on the "freedom" to let someone load the office database onto their personal laptop and leave it in their car outside Tesco; or in leaving it entirely up to the user whether their PC is infected or not?
Or are we too shy to ask uncomfortable questions in public on this subject? ®
Watch Now : Virtual Machine Movement with Hyper-V
COMMENTS
Diversion tactics
Anything to divert attention from the incompetencies of our political overlords...
@ read the article
OK. So "this is bullshit but take it into account because the author has reportedly published serious things before"? I'd like to be able to fall for that. I'd probably be part of the "upper management" now. But for some reason, my brain doesn't allow that yet. No matter who wrote the stuff, bovine excrement it is, BS it will remain. The only excuse I can think of would involve Scottish breath freshener... and this wouldn't make the initial point stronger.
Ho, and -I almost forgot- please read the comments before advising people to re-read the article... you might learn a few things.
Get real...
The author may or may not have done some decent work in the past – but this suggestion has me scratching my head. Reality and this suggestion might have bumped into each other in a darkened corridor – but they didn’t make eye contact and most certainly won’t get to know each other intimately.
At home I have running boxes with Win2k,Xp,OSX,WinCE, a Blackberry, Wii with wifi dongle, and a PS/3 all connected to the interweb. I have net ready LiveCDs for Linux and WinPE as well, and obviously a POS home wireless/router with which I can malconfigure dyndns if I wanted. Not regularly on I have a bunch of VMs for Server2000, 2003, and Vista. There’s a tablet PC with Win98 kicking about. Oh, and my NSLU2 which is Linux of course. I’m *never* going to bother to pay to get or keep current some piddly little Govt backed “certificate” saying ..err…what exactly??
Case in point.The Win98 tablet is no longer supported by the OS vendor – would I not be allowed to use it any more given that I assume this certification would be linked to the life cycle of the OS? It would have to be linked when you think about it. I bought the tablet 6 years ago, it works fine for what I want it to do. Imagine the revenue incentive M$ would have if it could EOL Windows2000 and XP and force everyone onto Vista off the back of Govt enforced certification? “Mr Bloggs is running an unsupported OS, off with his broadband!”
Then there’s the application layer. Windows LiveUpdate *can* inject updates for 3rd party apps, but no company I’ve ever worked for is going to allow MS to f*ck with their apps – even if a hefty percentage of them are out of vendor support.
If this ever got to Govt level, I guarantee it will go the same was as key escrow – a fluffy bunny utopian idea that has as much chance of flying as a migratory bird with a coconut tied to its feet.
old viewpoit
I think that the major reason for the authors call for regulations similar to car use on motorways (the driving license, tests and so on) Is an old school perception of a computer and the Internet as some kind of device (a car) of limited use (transportation). A computer is much more universal tool. And in my opinion, the Internet is more like a city, (or better a world itself ) than the highway. As people were able to live with dangers of the world outside, they will learn it online. Although I agree that education is essentially needed in first place, but not going hand-in hand with licenses.
Get off of my Internet
You've gone and fouled my Internet up. At this point, licensing all of you "end users" isn't going to help, so I've decided to shut the whole thing down...make your time....

Enabling efficient data center monitoring
The new Office Garage series:
Top 10 SIEM implementer’s checklist