Hacker News Reader

I was under the impression that Firefox already shipped with an ad blocker by default?

The default ad-blocking functionality won't block an attack like this. You'd need a more robust blocker like NoScript.

(which is great if you're looking for one, BTW!)