This is a neat question from a recent Sophos survey