I've only had time to skim through this - looks like it's comprehensive.
Also depressing how this is so far beyond what the majority of people are aware of / are willing to do. I worry what this means for Cybersecurity in general.
Also depressing how this is so far beyond what the majority of people are aware of / are willing to do. I worry what this means for Cybersecurity in general.
For example, operating systems should be aware of and support third-party encryption such as VeraCrypt. Today, a VC volume may be reported as "unformatted" by the OS. Opportunity to enable VC encryption on system disk should be right in the Windows Home installer.
Browsers should default to having ad/tracker-blockers either built-in, or an extension such as uBlock Origin installed by default. Default to having location services disabled, or extension such as Location Guard installed.
When you install an OS, the installer should ask "okay, what password manager do you want to use ?". It's okay for the user to say "none", but there should be subtle pressure. Same with VPN, same with firewall, same with backup software. OS should have built-in anti-virus (as Windows does), but also prompt up front for which anti-virus user wants ("none" is a choice).
Browsers need to push back somehow against web sites that want to know all the details of a device. Maybe default to display size and OS type and other details not revealed to JS.
Software updating should default to "automatic" (user can change it), and include all apps (including third-party apps) as well as OS.