"unless they are "dumb""
Yep. That's where all security stops : at the idiot who will repeatedly click OK/Yes without looking, who will answer all information requests without thinking, who will do whatever is written on the screen.
I believe the only solution to that is to keep those people away from computers. Of course, then we there is a host of new problems to take care of. I know ! Raise them to Management - with secretaries who take care of the typing and the clicking.
Biting the hand that feeds IT
