I just listened to the podcast this morning on my commute, and was surprised to hear you say that google-analytics.com is actually a malware distribution site and should be blocked using noscript. Whatever one may think of of Google Analytics, that domain is, in fact, legitimate and used by the GA service. Blocking it, while potentially beneficial from a privacy point of view, won’t protect you from malware.