[FunkyZero]

Web browsing is how 90% of PC's get infected. The other 10% come from email (normally running in a web browser as well).

Also, if you actually looked at the program, you would see that ANY executable program can be ran sandboxed, not just web browsers.

[OldEarlGray]

Baloney.

SQL injection uses neither “Web Browsing” nor “Email”.

If I want a sandbox, I’ll use a VM.

[OldEarlGray]

[Web browsing is how 90% of PC's get infected. The other 10% come from email (normally running in a web browser as well). ]

Meanwhile, in USB-enabled, non-mathimaticaly impaired reality land:

Flame can also move the target information–along with a copy of itself–onto a USB memory stick plugged into an infected machine, wait for an unwitting user to plug that storage device into an Internet-connected PC, infect the networked machine, copy the target data from the USB drive to the networked computer and finally siphon it to a faraway server.

http://www.forbes.com/sites/andygreenberg/2012/06/12/to-spy-on-offline-computers-flame-malware-was-designed-to-turn-humans-into-data-mules/