Simon Willison’s Weblog

Subscribe

How the myspace SWF hack worked. If Flash is a vector for XSS, is this the end of Flash badges?