The Security Nerd

Ben Edelman's list of spyware installation techniques

There's still no excuse for all the drive-by downloads possible with Internet Explorer, but notice how few of the vectors are exploits and how many are bundles and social engineering.