Your best solution until then is to peek solely at pictures from people and sites you trust. Update: Web engineer Christian Bundy and others are critical of Shah's claims that this is an exploit.

Over 25% of malicious JavaScript code is obfuscated by so-called 'packers', a software packaging method that has given attackers a way of evading signature-based detection, according to security ...