Originally Posted by raistlin

You're obviously free to make your own risk assessments, but you seem to be working on some seriously wrong assumptions:



False. Witness the aurora incident:
http://www.symantec.com/connect/blog...-0-day-exploit

Those were all up-to-date pcs, running corporate antiviruses, behind a firewall and NAT.

Some of those were on state-of-the-art corporate networks (e.g., Google).

You are working under severely misguided assumptions. In today's corporate world, zero-day drive-by downloads are common and scary.

This is what I study for a living ;-)