So much of the protection from this sort of attack has to do with user training (or the lack thereof). We need the same sort of PR campaign / public service mes

So much of the protection from this sort of attack has to do with user training (or the lack thereof). We need the same sort of PR campaign / public service messages that aim to reduce drunk driving, lack of seat belts, etc. And before you scoff at that, think of the economic cost of letting folks get "trojan'd" -- this helps build botnets, which have a measurable negative social impact on the Internet -- more spam, financial fraud, DDoS attacks, etc. Obviously not as severe as drunk driving deaths, but worthy of prevention nonetheless. I know I'm trained -- I look at that "OK" button on the install dialog and my stomach churns. But others don't have this geek instinct, and that should be corrected.