In this paper, we argue that ambiguity, that is people's inability to judge likelihood of risk, is a significant contributor to aversion to spyware risk. Since no objective or authoritative estimates of risk likelihood are available, but users still make decision, it must be the case that user's...