Perhaps I'm missing something but I don't see too much benefit from OTPs. If the machine in front of me is compromised (e.g. Firefox bug, Flash bug, Adobe Reader bug, Linux kernel bug, Windows bug, etc etc), a OTP doesn't stop a man-in-the-middle attack. Once the attacker is on the remote system they can open a backdoor. Game over.<p>Sand boxing seems to be a good idea (e.g .<a href="http://theinvisiblethings.blogspot.com/2008/09/three-approaches-to-computer-security.html" rel="nofollow">http://theinvisiblethings.blogspot.com/2008/09/three-approac...</a>). KVM and Xen seem pretty heavyweight. I was looking into using Smack to do lighter weight sandboxing but didn't get too far yet.