Turn off javascript by default to disable FaceBook.com scams (http://jdnash.com/2011/03/how-to-crush-facebook-spam-scams/) , the ‘lisa moon’ cross site scripting scam (http://jdnash.com/2011/04/lisa-moon-xss-over-1-million-web-sites-infected/), and attacks against cloud services (http://jdnash.com/2011/04/cloud-services-breached-data-stolen-at-epsilon/).