Re: the chicken or the egg
>>It really is time that we had whitelists by default...
How do you propose implementing such a thing? By using a pop up to ask the *user* if it's really ok to install or run that program?
Whitelists don't work because people can't be bothered to actually read the messages that do show up on their computer. Most people don't care what a pop up says, all they care about is which button they have to click to make it go away.
So, John, who would you have creating the whitelists?