Another attack on SSL (theregister.co.uk)

Is this a problem with SSL per se? Or is it something that can only be a problem if you have enabled Javascript?

This post has been made without using Javascript.