The idea of running untrusted code on your computer, and trying to isolate it, seems to be broken for now. I'd also be surprised if this is the last such hardwa

The idea of running untrusted code on your computer, and trying to isolate it, seems to be broken for now. I'd also be surprised if this is the last such hardware bug we hear of... As for Javascript: I use uMatrix in Firefox, with a default rule that disables all JS unless I explicitly have whitelisted it for a certain domain. Some websites break and don't show content. I intend to just skip those websites. The reason I set this up was actually to prevent tracking, but now it seems that it's good security practice too... The web is getting more and more annoying anyway, and I waste way too much time with it, so reducing my reliance on it seems like a good idea in any case.