If you've spoken with enough security researchers, you should understand that the internet security mess won't get solved. Ever. At all.

CA, MacAfee, Microsoft, Symantec and Trend Micro will happily continue to charge upwards from $50 per year to secure you computer. They have no reason not to hold on to their cosy oligopoly. But none of these will be able to prevent phishing attacks or zero-day exploits. Anybody who claims they do, is simply lying.

How can we restore some sense of security? Some argue that education is the answer. Or to take it one step further: should internet access require a licence?

19 Oct 2007

We don't allow people to get behind the wheel of a high power vehicle before they have demonstrated an understanding of the rules, risks and threats involved. If you are unable or unwilling to take the test, you're allowed to use harmless modes of transportation such as walking, cycling or public transport.

Why not require proof of internet literacy? If a user doesn't understand that he shouldn't visit websites advertised in spam email messages, block access to those corners of the web where these sites are hosted. Block all of Russia and China for all I care.

Only if you demonstrate an understanding of the internet's dos and don'ts, you're provided with access to the wider internet.

It might seem drastic, but the problem with security is that it's not a single victim crime. Users who fail to properly secure their computers, facilitate the hosting of child pornography and distribution of spam or malware.

It might not solve the entire problem, and goes against the open nature of the internet. But a walled garden for rookie internet users would hopefully prevent the most serious problems. Even licenced drivers have car accidents, but presumably not as many as when an unlicenced driver gets behind the wheel of an 18-wheeler.