I keep history for one day and keep cookies turned off with a few exceptions. See any problem with that?
Your solutions don't block scripts, and those scripts can do whatever they want to in your browser (such as execute the attack that the article describes.) Web bugs are also not affected, and they report your page visit to whoever planted the bug.
I tested the exploit in my FF, and the exploit doesn't work at all. This is because NoScript blocked the Javascript on his site by default, and that's how it should be. Most sites don't need Javascript, and if it's there it's only to spy on you and to show you the ads. Some sites use Javascript for menus, and most shopping carts use Javascript to validate your input. Those should be allowed. Or I use IE for purchases.