Security is a funny thing, and I often wonder if things like UAC and all-managed operating systems are not dancing around the issue of needing fundamental re-thinking.  Here's a funny example: DasBlog occasionally craps out on me, or maybe it's my session timing out before I can type up a post and hit "post to weblog."  Long posts are always composed in Word first, and shorter ones that I still don't want to re-type in case of the occasional fluke are saved by Ctrl+A, Ctrl+C, to be re-pasted into the edit window in case of an issue.  Is it ironic that when this event just happened, IE politely asked me for permission to allow access to the clipboard, access to the content I had just copied out of IE to begin with.