[Macworld]

Post your comments for Mozilla working on click-to-play feature to stop plugin exploits here

[EDronkert]

Ah, like the old http://hoyois.github.../clicktoplugin/ for Safari, which I always use.

[whitedog]

There are already Safari extensions, ClickTo and ClickToFlash that provide click-to-play support. But these are not built into the browser. As a result a user has to intentionally install them, in which case they should be more alert to what they do.

This is an old story in Malware protection, whether to take choice away from users or to put them in charge of their own security. As far as I know an ideal solution has yet to be devised. And every new security initiative raises the question all over again, as is happening here. The reason, of course, is that computer security is a moving target. For every solution there seems to be a new exploit. It's an endless game of Whack-a-Mole.