A lot of the problem is users' reluctance to upgrade off of XP to Win7 (or even Vista). Certainly Microsoft deserves blame for XP having been as insecure as i

A lot of the problem is users' reluctance to upgrade off of XP to Win7 (or even Vista). Certainly Microsoft deserves blame for XP having been as insecure as it was when released, but newer versions of Windows are incredibly more secure against these sorts of attacks, especially when they are running Microsoft Security Essentials. I'm not sure what you're talking about in terms of "MS-Versions" of HTML and JS, at least in the sense of them being a security risk. That's just anti-MS bullcrap, really. IE is actually inherently quite secure in lots of ways Firefox still isn't, and the primary vector for these types of attacks are Adobe plugins (Flash, Reader) and have nothing to do with browser-specific code.