[Lagged2Death]

Or by using a browser that doesn't silently and promiscuously attempt to connect to remote network shares. Like, any other browser. Good grief.

[besselheim]

Or both. Defense in depth.