November 30th is Computer Security Day. Its goal is "to remind people to protect their computers and information". Although "Educating Users" is one of "The Six Dumbest Ideas in Computer Security" list by Marcus Ranum (later I should post more on the thought provoking list), education and reminders can still be helpful.

The Day's organisers have posted suggested activities, including:

• Change your password. Cambie su contrasena. Modifier votre mot de passe.
  (By the way, look at this item on Bruce Schneier's blog.)
  
• Back-up your data. (after being certain that it is virus-free.)
  
• Verify that passwords are not "Posted" and all other keys are secured.
• Hold a discussion of ethics with computer users.
  
• Install all security-related updates to your computer's operating system.
• Consider the privacy aspect of the data on your computer and protect it.

Some of the suggestions, such as "Change the FORMAT command in DOS to avoid accidentally FORMATing of disks" and "Write-protect all diskettes that are not to be written to" seem out of date. (But there are people still using DOS and diskettes.)

The suggestions mention commercial and shareware software -- mainly about registering & paying for them--, but are silent about free and open source software. Also, there's no mention of cryptography options. With the growing number of data breaches, including the HMRC breach in the UK, cryptography is an important data protection tool.

Fortunately, one of the Computer Security Day suggested activities is to send the organisers an item to add to the list.

J.D. Abolins