Duh?
"The attacks exploit a flaw present in virtually every browser that allows unscrupulous webmasters to control the links a visitor clicks on."
If one doesn't trust the webmaster of the page their viewing, why should they trust the links do what the webmaster claims they do?
I think a much bigger security problem stems from the fact that 3rd parties like google, through it's adsense and analytics programs, has access to modify entire pages, capture cookies and other information through it's client side javascripts.
I'm not sure if people who use those programs are ignorant, or just don't care that google has complete access?


