Firefox + Noscript ...
I have a standard policy of ...
- Firefox:
Premium Link
Upgrade
and
- Noscript:
Premium Link
Upgrade
I have been promoting this inside of both US defense installations and international, financial institutions.
So much crap is getting through with MS IE, even with scripting disabled. Firefox can disable
all scripting
completely, but there are many sites you still want scripting for.
With Noscript, you "opt-in" to scripting. I.e., scripting is disabled by default for any site. You then enable scripting for a site when you trust it. Yes, it takes time to build up your list, but it works and makes browsing fairly safe again.
For those IT people around, despite "common thought," you
can administer Firefox centrally with objects. And that includes pre-populating the Noscript DB.
People, they call it "malware" for a reason. It's not just about "viruses" anymore, but
legitimate code that hijacks and redirects. Those are very, very difficult to track, and scanners will
never account for all of them at any time, only a subset.
Stop letting any site run scripts, and use NoScript to only enable it for select sites.