I agree with virus scanners being a security dead end, but I don't think virtualization is the answer (but we'll see how iOS does with their jail strategy). Pe

I agree with virus scanners being a security dead end, but I don't think virtualization is the answer (but we'll see how iOS does with their jail strategy). Personally I think SELinux is the right model: processes can only do what they are explicitly allowed to do. Vendors have to ship the required access settings along with their application so save users from having to plug it all in manually.