I DL a 17MB program. Watching my connections through the firewall it completely DLed with no alert from HIPS or FW. Using FF3 The process: Choose a file to DL Do not click "Save" The file will completely DL with no alerts Clicking "Save" now, HIPs and FW alert on activity Does this mean that DL items can get in with no alerts? Can this process be used to add malware while surfing? Is it exploitable?