普通用户不用linux

Google Chrome web browser
On Jan. 23, a new version of Google Chrome should also include mitigations to protect your desktop and phone from web-based attacks. But if you don't want to wait, Google says an experimental feature called Site Isolation can help right away.

Instead of grouping different websites you browse together in a single process -- which helps save your computer's memory, among other things -- Site Isolation appears to make each website use its own individual instance of the Chrome browser. That way, it's harder for a malicious website to access data from other websites you're browsing (using these new CPU exploits) and potentially do bad things.

To turn on Site Isolation on Windows, Mac, Linux, Chrome OS or Android:

Type or copy-paste chrome://flags/#enable-site-per-process into the URL field at the top of your Chrome web browser, then hit the Enter key.
Look for Strict Site Isolation, then tap or click the box labeled Enable.
If your work is saved, hit Relaunch Now. Otherwise, save your work, then quit and relaunch Chrome.
For Chrome on iOS (iPhone, iPad), Google says Apple will deliver any necessary fixes.

反正chrome上已经设置好了，站点隔离