I think that the situation is hopeless for joe users, if someone wants to own their computer they will. I wouldn't really even trust many IT admins to not get o

I think that the situation is hopeless for joe users, if someone wants to own their computer they will. I wouldn't really even trust many IT admins to not get owned if someone actually targets them (instead of the normal random stuff everyone gets). Even if you know what you're doing, in the worst case you just need to browse to the wrong URL to get instantly owned without user interaction. I think it's hopeless for systems that are used in standard "desktop" manner, the attack surface is so large. See for example this: http://nakedsecurity.sophos.com/2013/11/03/fake-femme-fatale-dupes-it-guys-at-us-government-agency/ http://nakedsecurity.sophos.com/2013/11/03/fake-femme-fatale...