> That seems like victim blaming to me. I think this is more like pretty good evidence that Microsoft has done a disservice to its users vis a vis their securit

> That seems like victim blaming to me. I think this is more like pretty good evidence that Microsoft has done a disservice to its users vis a vis their security. I squarely blame developers/designers. Not just Microsoft, but Netscape with SSL, Android with app permissions and side-loading, etc. There is this terrible historical concept that we can solve security issues with user education and work around design/deployment problems with security through obtuse user prompts. >> Remember when you'd find four different toolbars on IE that your friend/family/neighbor had no idea how they got? > Yeah. I fixed that problem by introducing them to Ubuntu and Firefox, not by cordoning off their ability to install applications of their choosing. Sure, just as long as you keep in mind that Firefox extensions and Ubuntu snaps/universe/multiverse aren't vetted for malware. Plus Firefox extensions (like those toolbars of days past) can inspect all traffic and capture things like credit cards and passwords. But hey, the user was notified that there was a risk and blindly hit OK - because it was the way to get the computer to do what they said they wanted the computer to do.