@TindrasGrove

it's the same picture

@TindrasGrove

"do not punish the behavior you wish to encourage" is a pretty useful concept to introduce people to.

@promovicz

and this cynical attitude disclaiming ability to make changes reinforces those patterns; do better.

@jsl

Just because something is technically possible for an informed user does not mean that a user who has been -constrained from learning- will even know that such a thing exists.

@jsl

yes, the part where the comment you responded to saying that -new users- who -do not have experience- have all of those concepts deliberately the fuck hidden from them by the UI they are given, such that - even if they are curious - they are actively lied to -by the research resources- on a regular basis, and thus have no opportunity for success -with- their curiosity.

The workflow you are describing is -not reasonable- for your average 10 year old in this year, and shows that you are engaging in the though process I described in the last paragraph of the -prior- post: https://infosec.exchange/@munin/116771824701213509

@jsl

buddy, you can only have an interest in finding out if the resources are -there to tell you that there's something to find out-

you're blaming users for not knowing about something they're deliberately told doesn't exist.

that's fucked up.

have you -seen- the world that they're experiencing now?

shit, the modern mobile OSs don't even want to acknowledge that filesystems exist in the UI. how the shit is a kid supposed to learn the "correct" way to do things in this situation?

now, I will grant, for those of us who grew up dealing with asshole elders who refused to even consider learning how to interact with computers and demanded things "just work" that were wholly unreasonable, yeah, the 80s, '90s, and early '00s sucked.

get over it.

the fucking boomer dipshits are dying off, and a bunch of zeds and alphas are growing up with an ecosystem that's completely fucked for any attempt to learn on their own.

perhaps fix things for them instead of assuming they magically had access to magazines with BASIC listings and permissive environments where experimentation was at least tolerated, instead of being given a fucking menuless UI on a locked-down kiosk with fuck AI search results either refusing to give them necessary knowledge because it's "Hacking" or telling them to snort glue?

if it were easy they wouldnae call it work, fuckface.

yes, it is frequently very the fuck difficult to figure out the context wherein a user might choose to do a thing that constitutes a security problem.

that is what you are paid for. get good.

if you think the users are stupid, then you are letting your own arrogance reduce your own ability to analyze the problem space fully.

users do things that make sense to them in the moment. failure to understand the context where an action -makes sense- and is thus the correct action to choose is a skill issue on your part.