Oh, I know, I'm guilty as well. I'm still one of the few non-IT users who have retained their rights to be a local admin on my work-computers due to the sheer number of Helpdesk request I would have to submit otherwise. However, this incident shows that security best practices are here for a reason and I'm sure eventually insurance companies will for example require proof of following best practices before insuring business continuity policies.
Anyway, this whole case is also interesting from a legal point-of-view. What restrictions can be placed on a user to enforce e.g. DRM? A person still has the right to commmit a crime (e.g. copyright infringement). Where do we draw the line? Next step is to ask for ID if you want to buy food that is unhealthy for some, undeer the auspices to preserve public health and decreasing health insurance costs. Maybe flag recovering alcoholics to prevent them from buying alcohol?
_________________________
There are two types of vessels, submarines and targets.
