XSS Twitter in minutes; Why you shouldn't store important data with 37signals

news.ycombinator.com

saved by: 0 people
related read on: How I cross-site scripted Twitter in 15 minutes, and why ... discussion