As a note, I think many banks have now removed security images. My bank used to have them, and now they don't.
That's incredible. Not sure if I underestimated hackers ingenuity or underestimated how gullible people are..
I don't know if it's "gullible" so much as not understanding or caring about the feature.
I don't think it's gullible for a user to proceed when they see a site missing an image, I think it's gullible that an engineer expects that the user would notice without any actual evidence. seems like a cardinal sin of engineering - don't assume your users will behave a certain way.