pit1337 wrote:
It's good option if you are someone important in, let's say, goverment or big company. I highly doubt that some experienced h4x0r will actually attack me. Even if, I hope he will enjoy my photos form holiday, couple of emails with family and friends and other diffrent things not important for everyone apart from me. This is why I've stopped beeing so paranoid about security (but it doesn't mean that I completly don't care).
Targeted, "live" attacks are rare. Yes, you're not going to be the target of some individual malicious software author singling out you and you alone. You're right in that regard.
Where you are wrong, however, is in assuming that the vast majority of threats are in any way targeted. They're not. Vast quantities of malicious software are designed to infect anyone and everyone that they can, adding them to botnets, searching drives for financial information and login credentials, monitoring network traffic for the same, etc. These are all activities that prove exceedingly profitable when carried out on a large scale, thus they are. Nobody is targeting you specifically -- but you absolutely are exposed to such threats on a regular basis, whether you choose to believe it or not. Heck, most of the exploits used to gain access to a website and use it as a distribution point for malware are themselves automated -- it's literally as easy [for the bad guy] as launching an application and heading off to the pub while it does its work.
You, and (I suspect) most other regular users seem to believe the threat model is much the same as it was 15 or 20 years ago. Nothing could be further from the truth. Nowadays, the threats come from organized, profit-driven criminals, and the barrier for entry into the business is so fantastically low that you simply cannot count on being "uninteresting".