> Is it all just a sham? Yes, unless you are so computer illiterate as to regularly download old viruses by accident. > How did no one within the company catc

> Is it all just a sham? Yes, unless you are so computer illiterate as to regularly download old viruses by accident. > How did no one within the company catch it? I doubt they do any reviews of their code beyond QA/"Does it work?" > Aren't security products developed by at least somewhat security-minded people? No. Pretty much the people who test for vulnerabilities [i.e. actual security-focused programmers] are more expensive than the average Windows desktop programmer. Now just imagine what companies that process your credit cards look like...