Oh, even the average user needs a firewall nowadays, no matter how up-to-date and optimized their system is. It's hardly moronic to use one. Yes, I haven't been attacked either, but I still wouldn't trust a system that hasn't got a decent firewall up and running. The thing about the attacks is that 9 of 10 times the user doesn't even know that he/she was attacked, nor will there be any traces of an attack. And yes, transfer speeds are calculated in kilobits per second, not kilobytes per second.