[creaghpatr]

Right, which is why the press should specify phishing here, and boost awareness for this particular threat, rather than ambiguous 'hacking'.

[tptacek]

Awareness is good, but I object to the notion that it is "largely avoidable", and that all we're lacking is some awareness training.