I like how he thinks, however...
I'm not sure I see the difference between patching and keeping an antivirus up to date. He rails against patching a system (to defeat exploits), but goes on to say in another article that he has his antivirus product update itself automatically. This is very similar to a patch (since the AV wouldn't be able to protect the system without it), but I don't know a way around it outside of having a bubble-boy computer that isn't attached to the internet and has no removable media. I suppose he could argue that we don't have a good antivirus system, since they all continually need updates.
I really do like the way he thinks. He bypasses the standard arguments and looks at the underlying assumptions.
