Firefox promiscuous IFRAME access bug. Lets malicious sites “display disruptive or misleading contents in the context of an attacked site” and intercept keystrokes! The demo worked in Camino 1.5 as well. Avoid using Gecko-based browsers until this is patched?
Sign in with 
OpenID
Well, you have to visit malicious sites or sites highly exposed of XSS attacks to be exposed. I'd say it's a minor threat. However, if this may lead to Opera's user base increasing, I'm all for it. ;-)
Certainly don't use IE instead, which has a much worse cookie theft bug announced at the same time.
dbt - 7th June 2007 16:48 - #