Here's how insidious it is:
KK could easily design a bot and embed it into one of her YouTube videos. Anyone with IE6 watches that video, they have the bot installed. Most BotNet bots are only designed for spreading spam, and doing DDoS attacks. THAT is what they will use your computer and connection for, not to spy on you or get passwords and such.
Spam ... I so hate spammers, they're as bad as con artists. Though with the Youtube videos it's not possible, they reformat them to clean them already, but Youtube could itself if it wanted. Luckily they are like me and only do it to themselves to test security.
Yes that's right, YouTube does scrub the files. BUT....
You could send folks a direct link to your file, and if they have IE6 and watch that vid, THEN you got their asses.
And yes, I declared war on spammers, BotNet operators, and their ilk... long, long ago.
IE6..... MUST..... FUCKING....... DIE!