[cpeterso]

The advantage of their "unsophisticated" attack is that it works on any website. jquery is often served off CDN, so it might not be a reliable target (for a site-independent attack).