Digital BW, The Print

> I block essentially all incoming traffic at the firewall for desktop
> client machines.  Doesn't everyone?

Using a firewall is a good idea, but that is besides the point. What you 
said was that it's impossible for a virus to infect a computer without 
human interaction and that's not true.

Even with a firewall it could still happen that a service on one of your 
open ports had a security hole in it and that a virus used that 
vulnerability to infect your machine.

Another example is the recent JPEG vulnerability recently discovered in 
windows which could leave you open to attack just by viwing a web-page 
with a JPEG image on it. I guess this could technically be decribed as 
user interaction, but viewing images online was previously thought to be 
safe behaviour even by security experts.

--
Daniel Staver
http://daniel.staver.no