Ask HN: What are the best resources for teaching IT security to laymen?

I'm looking for any tools and resources to help teach the average computer literate user better identify and avoid common security threats. Ideally resources that can demonstrate how to avoid things like phishing emails disguised as invoices or account statements, fake Flash or Java updates, websites that use the name of a legitimate website as part of their sub domain, and other semi-sophisticated methods that an average computer user might fall for but can be identified with a little knowledge.