[kamjam]

Fair point. But if they have gone to this extent, they could just as easily inject some code into the HTML no?

http://news.ycombinator.com/item?id=3804608

[Benferhat]

They're talking about what happens when you load an infected jquery.min.js from cache when you get back to your home wifi network.