Only Windows users with Javascript enabled are screwed: https://krebsonsecurity.com/2013/08/firefox-zero-day-used-in-child-porn-hunt/ Actually that doesn't go into such details, but I talked with some very skilled hackers who have analyzed the exploit code and they say it requires Windows to work, and javascript to get started. So Linux users should be safe as well as anyone who has Javascript disabled.