Hi, Haider. No, I wasn't referring to EMET. I was thinking about what Ed Bott wrote about TPL's:
So if you’re the owner of a big network of web properties, and you see a site visitor arrive using IE9, wouldn’t you want to helpfully offer that visitor the option to install a Tracking Protection List that whitelists all your domains? All in the interests of improved user experience, of course.
We see how easily people are fooled by rogues so why wouldn't they also think they are getting a helpful TPL from a site they visit? Just the other day, I received a message from someone I know asking if I would answer a couple of security concerns about her PC.
I am getting frustrated here with trying to resolve some of these issues. First of all, how "safe" is Windows as a whole? For example, if Windows Security page pops up from the internet and says your computer has been infected and if you don't download their program your computer will crash?
This was her first experience with malware. All she was doing was looking at coloring page printouts in preparation for a Girl Scout meeting. She clicked a link in the search results and BAM! She was immediately redirected to a "Windows Security" pop-up that said she had several high to critical security threats and that her computer was in danger of crashing unless she downloaded the program. Her A/V picked up on it immediately and quarantined the download -- which had started without any action on her part.
So, what if, instead, when she landed on the "coloring page", there was a message displayed something along the lines of . . .
Did you know you are being tracked? The links you click, the path you took to get to this site is all being recorded. In order to block tracking, Microsoft has provided the ability to add "Tracking Protection Lists" to Internet Explorer 9 for your privacy. For your convenience, we provide our customers with a custom Tracking Protection List. Click here to add our list.
Perhaps the list includes a few valid tracking domains but it whitelists its own site domains. The "allow" has obviated the block provided by any other list(s) the person has installed. Thus, my comment that education is key and the need to understand, as Ed put it, "Allow rules trump Block rules."