Jeremiah Grossman (via NYTimes): Right at the moment a Safari user visits a website, even if they’ve never been there before or entered any personal information, a malicious website can uncover their first name, last name, work place, city, state, and email address. He recommends unchecking “Using info from my Address Book card.”