Security → Dealing with stubborn users with very old hardware and software...

I am sure you guys deal with it. How do you guys deal with them as clients, strangers, friends, and family members. They don't want to upgrade hardware to use newer and more secured software (e.g., Mac OS X v10.5.8)? I tried to secure as most as I can like the (lat/new)est versions of their software and updates. They care not about security and privacy issues even though I warned them about them even with proofs from the recent news.

Thank you in advance.

{said by somone who uses 12 year old hardware (and a 14 year old OS) because they are disabled and unable to work, and have no other resources to become "secure" online. With less then $20 a month for non-essential goods I am knowingly using beyond EOL because its all I have. Otherwise I have no computer or access. Period!}

Is this a client who will not apply patches and keep "active" software updated? Or is the 'client' somone with "legacy equipment" for whom has no active support (beyond EOL for versions of use)and is in a 'do or die situation' for other issues?

One involves invoking fear and/or providing the service yourself(for a price). The other is a matter of personal opinion or choice:

•"I can no longer service you until you stop being a 'cheapskate' (other customer service words and buy purchase something less then 3-5 years old."

•"I am sorry but I cannot support your equipment (or do anything about it). It does not function as required in today's needs and I cannot find the resources to work with it."

•"Your system is too old to be using "software/hardware" and you are at extreme risk of suffering the consequences if you do not upgrade your software (or supporting hardware). Your software is insecure without spending more money."

(etc etc)

•Consult with or refer to 'other product specialists' on options to purchase or acquire hardware/paid software" within client's budgetary or other needs - if any. .

•Consider alternatives or work around if possible (such as the 'L word' for legacy hardware/software)..

•Shut up and deal with it because they are paying you (and likely know their screwed over by their legacy devices and have reasons beyond "keeping up with the Joneses"). An option is having "stock" or "resources" to work with legacy systems. Up to your "tolerance" limit of course.

•Predatory pricing is a possibility (captive audience).

•Ignore the clients phone calls or contacts (lie, misdirect, avoid until they leave you alone) and seek other customers/clients who are willing to upgrade and or have technology that meets your "security assessments" (If possible)..

•If this is a corporate, government, or company client (and not a home-based individual) Consider consulting with your fellow 'CORP IT people" in another subforum of this website about it.

Get them to pony up for a CrashPlan subscription. At least then, when their system does get pwned, they won't lose all their cat videos.

There are lots of people using old hardware/software for a multitude of reasons, so I think it's best to explain the situation, advise them of their options, then move forward accordingly, and of course document any such discussions with the client.

{{{ SMILE }}} .... "Give a man a fish and you feed him for a day; teach a man to fish and you feed him for a lifetime & IGNORANCE go fishing with huge pack of beer and coming back just with a dream"

 
I was once maintaining a PC for a family member. The daughter in the clan (my niece) told me that she "clicks on anything because she knows I'll always clean up the mess for her."

That was the last time I repaired that PC.

Of course, family is different than customers....

I have dealt with this on a number of occasions.

I used to work a company that had been around since 1977 (not M$) and produced software for windows machines.

We finally put up a note on our website that we would only support the current version of the software. The reason for this is because we had people calling up about the DOS and Windows 3.1 versions of the program and were complaining that they could not get it to work on Windows Vista.

In general I take the time to fully explain the dangers of using really old computers (Windows XP and older) such as lack of support, hard drives wearing out, security issues, viruses (sorta), malware (the much bigger issue), etc. etc.

you charge family more always and with out exception. Same for friends

Welcome to another edition of "The way it has always been!"

It's not the hardware and software that is the problem, it is the end users. Giving them faster hardware will only speed up the rate at how fast they get infected.

How to deal with them as clients? Well, you already warned them. At this point all one can do is their job and collect the cash. Are they near the Detroit area? I will take that cash cow off your hands if you don't want them.

This concludes this edition of "The way it has always been!"

Nope. L.A. area.

What did you say/do when she came back to you about it?

Nice. Or ask for more money for these vintage stuff? :P

said by antdude :

---

They care not about security and privacy issues even though I warned them about them even with proofs from the recent news.

---

I care VERY MUCH about privacy and security!!! (I dont believe mainstream BS that has an agenda to try and scare ppl)

I want an OS and software I can trust and KNOW ISNT SPYING ON ME (Win98se/IE6/MyIE2)

YES.....I CARE VERY MUCH SO ANT

By the hour.

I just think of them as regular customers.

My 2 brothers stopped bringing me their computers because they don't want to hear my lectures anymore.

My younger brother always tells me, “I don't keep any thing personal on my computers so I don't need security.” He tells me this as he is making purchases online from his Android.

My older brother just buys new computers when they stop working. In fact he just purchased a Lenovo stating a Bestbuy geek told him they're the best.

You can't fix stupid!

I am my only client, and I wouldn't call myself "stubborn" -- just practical, continuing to use WinXP because upgrading would be expensive, since many of my programs will not run on a later OS.

You mention security. Although I don't do formal testing anymore, I will be happy to look at a URL in the wild you can provide that hosts an exploit to see if it can intrude on my system.

You can forget any with the much overly-hyped Angler Exploit Kit. Out of curiosity, I tried a couple of sites which hosted Angler, and nothing ran. Why? Because currently, Angler contains 0-day Flash, and Silverlight exploits. With plug-ins whitelisted, the exploit is not triggered.
You are very welcome, antdude!
Very astute observation, Cthen!

----
rich