Windows XP die-hards can slash attack risk by dumping IE