if you think the users are stupid, then you are letting your own arrogance reduce your own ability to analyze the problem space fully.

users do things that make sense to them in the moment. failure to understand the context where an action -makes sense- and is thus the correct action to choose is a skill issue on your part.

yes, it is frequently very the fuck difficult to figure out the context wherein a user might choose to do a thing that constitutes a security problem.

that is what you are paid for. get good.

if it were easy they wouldnae call it work, fuckface.

now, I will grant, for those of us who grew up dealing with asshole elders who refused to even consider learning how to interact with computers and demanded things "just work" that were wholly unreasonable, yeah, the 80s, '90s, and early '00s sucked.

get over it.

the fucking boomer dipshits are dying off, and a bunch of zeds and alphas are growing up with an ecosystem that's completely fucked for any attempt to learn on their own.

perhaps fix things for them instead of assuming they magically had access to magazines with BASIC listings and permissive environments where experimentation was at least tolerated, instead of being given a fucking menuless UI on a locked-down kiosk with fuck AI search results either refusing to give them necessary knowledge because it's "Hacking" or telling them to snort glue?

@munin I routinely have to remind a (very smart, terminally online) friend that we do not shame people for taking the path of least resistance and just using a computer in its default configuration with the web browser that was shoved in their face and no fancy pants extensions.

Yes we can try to educate (depending on our relationship) but we first have to acknowledge that the fact that the default state of computers is terrible is an indictment on the corporations that sell them, not an indictment of their users.

Imagine if you bought a new car, and you (yourself, not a mechanic) had to install seat belts and airbags and ABS and a number of other safety systems before even driving it off the lot in order to get car insurance. Sounds stupid, right?

And yet, that is what we somehow expect of ordinary users, and I am so, so tired of terrible defaults.

@TindrasGrove

"do not punish the behavior you wish to encourage" is a pretty useful concept to introduce people to.

@munin also “make doing the right thing easy” (other side of the same coin perhaps?)

@TindrasGrove

it's the same picture