[Carth]

Decent set of answers Hugh, thanks.

Not having any dealings with internet security in an IT type role (apart from at home obviously), I do though have work related experience (quality control) in an office where there were definitely a couple of people who were very Blasé when it came to passwords and 3rd party Emails etc.

From your answers, I guess globally there's not much can be done without increasing the 'costs' of better security, and the risk of incurring the wrath and annoyance of the general 'not my problem' public users . . . whether that's shopping, booking a holiday, online banking, buying concert tickets, or any number of things where internet activity is required.