Beware of browser extensions, especially bitcoin related ones.  
Don't run java/flash, if necessary use somthing like noscript (browser extension ).


Good post, it's definitely a good time for everyone to audit their own security.

It's not paranoia if they really are out to get you!