I use NoScript, but I have "Temporarily allow top-level sites by default" enabled (Base 2nd level domains). Basically, if I visit <a href="http://foo.example.com" rel="nofollow">http://foo.example.com</a>, any script hosted on example.com is allowed to run. Then, on pages that seem to have stuff missing, I'll go ahead and allow scripts from certain sites to run (e.g. akamai.net, aolcdn.com, autotraderstatic.com, googleapis.com, yahooapis.com, youtube.com).<p>The main point is to limit exposure to XSS attacks. There are still sites (and I'm sure even some linked on HN) that allow comments without properly sanitizing input. This makes it possible for a commenter to embed javascript in a blog comment which would cause a cookie for that site to be sent to an external site, or which takes advantage of a browser vulnerability.<p>Another reason is to deter a lot of forms of tracking. By not running scripts from the likes of google-analytics.com or quantserve.com (two sources for scripts in this submission), my browsing activity is not followed quite as closely as it otherwise would be.<p>Finally, I use it to block Flash, Java, and whatever else ads, which only add annoyance and CPU consumption to my browsing experience.<p>Regardless, the submitted site worked fine for me. The effect is neat but I don't think it really adds a whole lot.