Comment Re:Or more likely (Score 1) 189
Yes sir. Training users does significantly help as does a comprehensive suite of programs. Limited permissions/accounts can also help in a controlled environment (so users can't go installing Super Smileys 3000 on a whim) and would address the remainder of the user issues above.
One reason Firefox has been so successful is it's auto-updating feature for browser and extensions. It doesn't ask, it just does, by default. This is where Adobe has failed miserably. This is why such a large percentage of its Acrobat/Reader and Flash installed user base is outdated and thus still vunerable to yesterday's attacks. The fact that Adobe's aforementioned software has arguably more security flaws out of the gate, auto updates, by default, would significantly assist in helping keep their userbase safe. It's a fairly convoluted process to check your flash version (google for flash version update or similar) and not easily found if browsing their site. (Aside: One app, Grooveshark, actually prompts when you have an outdated version of Flash citing security concerns and provides a nice link to update. Awesome.) I hate manually having to check each of my programs for an update. That's dumb. Almost as dumb as MS patch Tuesday. "We have some serious flaws here, but we can't let you install the fix until next Tuesday. In the meantime, hope you don't get hacked."
Sigh. When will people start taking security seriously?