Examination of vulnerable online Web browser

[beGi]

Security is important to you? But you're too lazy or don't have the time for upgrade?

Maybe this will convince you to keep your software up-to-date.

And remember, chain is strong as it's weakest link.....

Enjoy

[aaa]

That's what NoScript is for:
http://hackademix.net/2007/12/05/plugin ... nsecurity/

It's as annoying as disabling cookies (in terms of sites that refuse to work until they're added to the allowed list), but once you disable javascript and all your plugins you only have to worry about keeping the browser up to date.

[Puppy]

Security must be done by limited system privileges (i.e. to be logged under User account). Thats the only way which is really secure by design. Using obscure applications or disabling some of its features is not about security at all. Every software is buggy.

[aaa]

Every software is buggy.

That's the idea, if you're plugins aren't always running things, then it's less likely that their bugs will be taken advantage of.

Security is all about disabling certain things; running as a restricted user is disabling certain things.

And the restricted user isn't "truly" secure (is anything?). It stops stuff from burrowing deep into your system, but stuff can still come in, access your files, install toolbars, etc. Granted most malware currently breaks when running as a restricted user, but if they wanted it to work, they could make it work.