The hosts file is a nice hack (in the good sense of the word; not the malicious one) allowing one to block trillions of hostile websites. Malware, adware, ads, etcetera. It has a few disadvantages, one of them that when you run a local webserver on 127.0.0.1 your browser will access it every time you use your hosts file to block ads (and that happens a lot) -- for most Neopets players that is of no concern though.
I'm using
Peerguardian (on BSD) for this purpose using dynamic firewalling. Peerguardian has certain groups such as ads, government, P2P, etcetera which you can block. Its basically a simple firewall (ruleset). It is available for the popular desktop OSes (Windows, MacOSX, Linux, *BSD).
Privoxy is a "filtering" proxy protecting private data from your browswer. It runs local on your computer can do something similar to this (and much more). Tor is an anonymizer you don't need that to play Neopets. In fact, you do not want to use an anonymizer network to send data containing passwords (your Neopets login) since one of the endnodes may sniff it. Don't use Tor for such purposes its not suitable. The same is true for a proxy except that such is usually not anonymous at all, or at best only anonymous for protecting against the website knowing who you are (Tor is useful against sniffing governments, RIAA, etcetera, as well) so using a proxy the person who runs it can get your Neopets cookie/password. Do you know them? Trust them? So neither Tor nor a proxy is useful for this purpose. Ofcourse, Privoxy runs on your computer and you trust yourself (so does Tor but it uses an anonymizing P2P network with extensive routing and encryption).
This all has nothing to do with CSS. Although one could use CSS to block ads as well (
Greasemonkey for FF there is sth like that for IE as well i forgot the name.
GreasemonkIEperhaps? Could be various versions).
The most simple way is IMO either the hosts file way (although not cleanest) or PG (PeerGuardian). PeerGuardian also allows you to block malicious people on P2P network such as people who use P2P from RIAA IPs (why would they do that?
). Privoxy and Greasemonkey are a bit harder to get set up but would do the job too.
I'm not a CS major either. CS major says nothing about computer security at all. Usually, its rather people who know their OS well such as (some) programmers or people who secure computers for a living who know about security. A programmer may have a CS degree, or not. There are some who claim to know so much about computer security but are essentially clueless (hello
Steve Gibson!).
Hope that was useful to someone...
PS: Anjuna, ActiveX is very useful for Trident-based browsers as it allows one to use plugins in a Trident-based browser. Plugins such as Java, Flash, Shockwave, Quicktime, Acrobat Reader, etcetera. Now, if you don't need those plugins, you can disable ActiveX indeed, but you basically do need Flash to play Neopets. Also, some settings may be changed to make ActiveX slightly more secure.