sometimes you must swim through a lot of misinformation or insults. What is "obvious" to some is another language to others. Please do not assume others are not trying "this and that". The "googles" "yahoos" are fine but not the "end-all-to-be-all" too everything, sometimes just the volume is daunting. I am sure you saw in school people learned best in different ways. Unfortunately, the whiz kids always "turned on the key and stepped on the gas" leaving the rest of us to pick up pieces, including unwrapping them from around the tree when they crashed.
As to the "pay on line" where either a bank account or credit card are automatically debited can be dangerous (I have only one auto pay, my ISP). One person learned that the "human" on the other end is fallible and that companies once they have the money hate to admit error and give it back.
The charge was for $50.00, the vendor's clerk keyed $50,000.00. The system didn't have a "logic sniffer" to ask for a review of entry. The person didn't know anything was wrong until checks started to bounce. After a few MONTHS of run-arounds, the person had to call one of the TV-consumer helpers. Even they had to "convince" the vendor of the error. When some "lightbulb" or reason lit up, they still didn't want to clean up the damage of bounced checks--fees to businesses who were stiffed, the bank's individual fees and, oh yes, clearing the person's good name with the credit reporting bureaus.
Technology is only as dependable as those using it and there are many of us who ask and are dusted off with "everyone knows that" w/o a useable answer.
I recently installed RealPlayer, and took note of the fact that their EULA mentions:
6. FIREWALL CONFIGURATION. The Software configures certain firewall applications such that the user is not alerted when the Software requests or receives data necessary for playback of content over the UDP protocol.
After installation, I checked, and sure enough, ZoneAlarm listed several Real components, with Internet access enabled!
If Real can do it, then so can a virus or any other malware, rendering ZoneAlarm totally useless.
It would appear that this weakness is not limited to ZoneAlarm, but is one that's inherent in all firewalls. Here's what Marc Maiffret, Chief Hacking Officer at eEye Digital Security, had to say when I informed him of my findings (I'm quoting him with his permission):
There is no personal firewall out there that will stop local code from being able to communicate out to the network if it wants to. ZoneAlarm is easy to bypass to communicate out to the world.
The problem is that most other people still believe in things like ZoneAlarm... I can't understand why.
(End of quote)
And there's no easy solution. You can check ZoneAlarm's programs listing to see which ones have permission to access the Internet, but it's highly unlikely that you'll recognize all the program names listed there - even the legitimate ones. And even if you check on a regular basis, if you find a rogue program there with Internet access, the damage may already have been done. It may have already sent out your passwords, credit card numbers, etc.
It's important to spread the word. People need to know that their systems aren't as secure as they think they are. And with enough publicity and pressure, maybe the companies writing firewall software will address the problem.

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic