> If you follow those two basic things, websites cannot hurt your machine. Oh yes they can. Quite a bunch of "helper" apps - printer drivers are a bit notoriou

> If you follow those two basic things, websites cannot hurt your machine. Oh yes they can. Quite a bunch of "helper" apps - printer drivers are a bit notorious IME - open up local HTTP servers, and not all of them enforce CORS properly. Add some RCE or privilege escalation vulnerability in that helper app and you got yourself an 0wn-from-the-browser exploit chain.