# What the public knows about Cyber security. Quiz **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [April 11, 2017, 1:58pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234 "2017-04-11T13:58:10Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![sleestak](https://avatars.discourse-cdn.com/v4/letter/s/919ad9/32.png) [@sleestak](https://boards.straightdope.com/u/sleestak)\ **Post date:** [April 12, 2017, 2:41am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/21 "2017-04-12T02:41:11Z")
> [@Bayard](#): > > Great point! > > I got 10, but I do security for a living. I got a 10 as well, though security is only a small piece of my job. Bone, the writer means that you are in the 99th percentile on the test Slee ---
**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\ **Post date:** [April 12, 2017, 3:19am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/22 "2017-04-12T03:19:45Z")
> [@Aspidistra](#): > > I disagree with their answer to question 2 (and yeah, I did get it wrong - why do you ask? ;)). In my mind, “phishing” attacks are strictly those intended to extract login and password information by deception, not any and all attempts to install malware by impersonating a trusted source, and only the ‘fake website’ out of their three answers would necessarily do that - the other answers might just give you a virus. [Wikipedia](https://en.wikipedia.org/wiki/Phishing)agrees with me and hey, how much more authoritative can you get! > [@Quartz](#): > > I got 9/10 but their given answer for the first question is incorrect. HTTPS means that the link between you and the site is encrypted. An HTTPS website can still store information locally unencrypted. I had the same reaction to both these questions. I had a moment of, “Do they want the security professor answer, or the common usage answer?” I went with the second. The HTTPS one was just terribly written. And, I also still think of phishing as just an attempt to get login credentials, but I think many people even in the security industry have started to use the term for all kinds of email delivered attacks. I think this is unfortunate loss of precision in the jargon, but whatcha gonna do? ---
**Author:** ![Shagnasty](https://avatars.discourse-cdn.com/v4/letter/s/9dc877/32.png) [@Shagnasty](https://boards.straightdope.com/u/Shagnasty)\ **Post date:** [April 12, 2017, 3:27am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/23 "2017-04-12T03:27:03Z")
10/10 but the company that I have consulted for over 7 years makes me take much longer versions of similar tests many times a year. I don’t even need to read the material anymore. I just click through them and complete supposedly hour long tests in 10 minutes or less. That test is very straightforward and not that difficult if you know anything about cyber-security. It is appalling that most people score that poorly. My officemate is a lowly printer specialist junior employee and I would bet anything that he could still hit 9/10. ---
**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\ **Post date:** [April 12, 2017, 3:39am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/24 "2017-04-12T03:39:44Z")
> [@Shagnasty](#): > > It is appalling that most people score that poorly. Honestly, I don’t think so. While I thought the test was fairly easy, I can’t imagine most people really know or care what “https” is, what a botnet is, what ransomware is, how tracking works on your phone, etc. Like I said, I thought it was an easy test, but I like this stuff and read about it. I can’t imagine most people really give a shit down to that fine a level. ---
**Author:** ![Ann\_Hedonia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ann_hedonia/32/319_2.png) [@Ann\_Hedonia](https://boards.straightdope.com/u/Ann_Hedonia)\ **Post date:** [April 12, 2017, 3:50am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/25 "2017-04-12T03:50:15Z")
I got a 9 out of 10 and I know very little about the subject, most of it could be guessed with a little thought and common sense. And then they made the claim that I did better than 99% of the people that took the test. Because these tests are nothing but click bait and the goal of the people that publish them is to get as many likes and shares and tweets as they possibly can. And whose going to post a low score on Facebook? I put this theory to the test recently when I saw a link titled " Do you have he vision of a pilot"? I solved all 10 vision test and was told I have " the vision of a pilot. Only one percent of the population can see as well as you can! Quit your day job and go into aviation! Don’t put your precious gift to waste. Which is funny because a cataract has reduced the vision in my left eye down to shapes and blurs. ---
**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\ **Post date:** [April 12, 2017, 3:55am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/26 "2017-04-12T03:55:09Z")
> [@Ann\_Hedonia](#): > > I got a 9 out of 10 and I know very little about the subject, most of it could be guessed with a little thought and common sense. > > And then they made the claim that I did better than 99% of the people that took the test. > > Because these tests are nothing but click bait and the goal of the people that publish them is to get as many likes and shares and tweets as they possibly can. And whose going to post a low score on Facebook? > > I put this theory to the test recently when I saw a link titled " Do you have he vision of a pilot"? > > I solved all 10 vision test and was told I have " the vision of a pilot. Only one percent of the population can see as well as you can! Quit your day job and go into aviation! Don’t put your precious gift to waste. > > Which is funny because a cataract has reduced the vision in my left eye down to shapes and blurs. It’s a Pew Research Center quiz, so I actually think the numbers are legit. There’s no reason for me to doubt them. Like I said above, I really don’t think most people would know the answers to half those questions. ---
**Author:** ![Dr.Strangelove](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dr.strangelove/32/6613_2.png) [@Dr.Strangelove](https://boards.straightdope.com/u/Dr.Strangelove)\ **Post date:** [April 12, 2017, 4:08am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/27 "2017-04-12T04:08:13Z")
10/10. Pretty trivial for anyone paying attention to these issues, but also not surprised that only 1% of people would get that score. You can see a per-question breakdown at the end. The last 3 questions were apparently the hardest, with only 10% answering the GPS question correctly, and the other two at 13% and 16%. I’m not surprised that people wouldn’t know about VPN (although even my mom used to use it for her work email), but you’d think people would know cell towers and WiFi hotspots can keep track of your location. ---
**Author:** ![Defensive\_Indifference](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/defensive_indifference/32/6502_2.png) [@Defensive\_Indifference](https://boards.straightdope.com/u/Defensive_Indifference)\ **Post date:** [April 12, 2017, 2:49pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/28 "2017-04-12T14:49:21Z")
> [@Bayard](#): > > I had the same reaction to both these questions. I had a moment of, “Do they want the security professor answer, or the common usage answer?” I went with the second. The HTTPS one was just terribly written. And, I also still think of phishing as just an attempt to get login credentials, but I think many people even in the security industry have started to use the term for all kinds of email delivered attacks. I think this is unfortunate loss of precision in the jargon, but whatcha gonna do? Another not very good question was #3: “A group of computers that is networked together and used by hackers to steal information is called a …” The answer they’re going for is “botnet” which is partially correct. You can siphon information from machines in a botnet. You can also use a botnet as the means to deliver information-stealing malware to more victims. But you can also use a botnet to distribute ransomware, conduct DDoS attacks, conduct click fraud, send spam, etc. I think the question implies that stealing information is the sole, or at least primary, purpose of a botnet, which is debatable. ---
**Author:** ![WildBlueYonder](https://avatars.discourse-cdn.com/v4/letter/w/ce7236/32.png) [@WildBlueYonder](https://boards.straightdope.com/u/WildBlueYonder)\ **Post date:** [April 12, 2017, 5:28pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/29 "2017-04-12T17:28:46Z")
WOW I got 8/10. Rarely do I do this good especially with computer items. Guess being on the internet/computer learned me something I missed the first and last. The safest password? That had to be the easiest question! ---
**Author:** ![Qwakkeddup](https://avatars.discourse-cdn.com/v4/letter/q/90ced4/32.png) [@Qwakkeddup](https://boards.straightdope.com/u/Qwakkeddup)\ **Post date:** [April 13, 2017, 5:49am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/30 "2017-04-13T05:49:20Z")
Virtual dummy here, 9 of 10. missed the two step authentication. Mostly because I didn’t read the question correctly I think. I don’t work in IT, I am just generally paranoid. ---
**Author:** ![Kelevra](https://avatars.discourse-cdn.com/v4/letter/k/97f17d/32.png) [@Kelevra](https://boards.straightdope.com/u/Kelevra)\ **Post date:** [April 13, 2017, 7:38pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/31 "2017-04-13T19:38:54Z")
10/10 I am not in IT. I read a bit about it (mostly on this message board). Really I just knew enough to eliminate the wrong answers. That said, who cares if anyone not explicitly in cybersecurity knows what a botnet is? ---
**Author:** ![ivylass](https://avatars.discourse-cdn.com/v4/letter/i/9de053/32.png) [@ivylass](https://boards.straightdope.com/u/ivylass)\ **Post date:** [April 13, 2017, 7:55pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/32 "2017-04-13T19:55:06Z")
10/10! ---
**Author:** ![Pork\_Rind](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pork_rind/32/111_2.png) [@Pork\_Rind](https://boards.straightdope.com/u/Pork_Rind)\ **Post date:** [April 13, 2017, 8:06pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/33 "2017-04-13T20:06:37Z")
I took the test and it told me that the 80’s band I should be in was the Dead Kennedys. It also told me I should move to California. Just kidding. I got 10/10 and am a certified idiot. ---
**Author:** ![Barkis\_is\_Willin](https://avatars.discourse-cdn.com/v4/letter/b/a183cd/32.png) [@Barkis\_is\_Willin](https://boards.straightdope.com/u/Barkis_is_Willin)\ **Post date:** [April 13, 2017, 8:59pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/34 "2017-04-13T20:59:33Z")
I do not work in IT and I got 7/10. Better than I thought I’d do. > [@WildBlueYonder](#): > > … > The safest password? That had to be the easiest question! Yeah, well, that’s one I missed so… I thought the additional character might have made into\*48 better. ---
**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\ **Post date:** [April 13, 2017, 9:24pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/35 "2017-04-13T21:24:10Z")
10/10, but 40 years in cyberville will do that. And at least I can write stuff better than the redundant “…of the public of the public…” ---
**Author:** ![rat\_avatar](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rat_avatar/32/255_2.png) [@rat\_avatar](https://boards.straightdope.com/u/rat_avatar)\ **Post date:** [April 13, 2017, 9:33pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/36 "2017-04-13T21:33:54Z")
> [@WildBlueYonder](#): > > WOW I got 8/10. Rarely do I do this good especially with computer items. Guess being on the internet/computer learned me something > > I missed the first and last. > The safest password? That had to be the easiest question! Not really, while common advice and I did get a 10/10 complex and short passwords are actually far easier to crack than longer less complex passwords. > **[Password complexity rules more annoying, less effective than lengthy ones](https://arstechnica.com/information-technology/2013/06/password-complexity-rules-more-annoying-less-effective-than-length-ones/)** > > Symbol, number, and cap requirements: do not want. Might not need. But it was an OK survey to see what peoples general if not experimentally verified understanding is. ---
**Author:** ![Infovore](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/infovore/32/420_2.png) [@Infovore](https://boards.straightdope.com/u/Infovore)\ **Post date:** [April 13, 2017, 11:46pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/37 "2017-04-13T23:46:18Z")
I got 10/10. Between working in IT for 25+ years and online gaming, I’d have been surprised if I missed any of those. ---
**Author:** ![psychobunny](https://avatars.discourse-cdn.com/v4/letter/p/54ee81/32.png) [@psychobunny](https://boards.straightdope.com/u/psychobunny)\ **Post date:** [April 14, 2017, 12:45am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/38 "2017-04-14T00:45:13Z")
9/10. I’ve never heard of a Botnet. ---
**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\ **Post date:** [April 14, 2017, 12:54am UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/39 "2017-04-14T00:54:40Z")
> [@psychobunny](#): > > 9/10. I’ve never heard of a Botnet. That’s because your computer is probably one of them. Ever wonder what your CPU is doing behind your back? ---
**Author:** ![iamthewalrus\_3](https://avatars.discourse-cdn.com/v4/letter/i/258eb7/32.png) [@iamthewalrus\_3](https://boards.straightdope.com/u/iamthewalrus_3)\ **Post date:** [April 14, 2017, 5:22pm UTC](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234/40 "2017-04-14T17:22:21Z")
> [@WildBlueYonder](#): > > The safest password? That had to be the easiest question! I thought it was the hardest, actually, and probably the worst question on there. _All_ the passwords are way too short to be secure. Sure, one of them uses a larger character space and doesn’t include dictionary words, but it’s still so bad! Also, the “two factor” authentication question is bad, because it only shows us one of the factors. The other is implied, but might not exist. I’ve seen websites where you don’t have a password, and they simply _always_ send a temporary token to your email address to log in. 10/10. [Previous page](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234.md?page=1) [Next page](https://boards.straightdope.com/t/what-the-public-knows-about-cyber-security-quiz/784234.md?page=3)