Your friend is for the most part quite wrong. The biggest security vulnerability in any browser is ActiveX, which FF doesn't even have. The overwhelming majority of the nasty spyware is introduced through Firefox. A little good judgement goes a long way though. FWIW, ActiveX can be disabled. That is the only useful thing in IE though.
The only reason I ever even load IE any more is to go to a site that requires ActiveX.
The only reason I ever even load IE any more is to go to a site that requires ActiveX.






