[amenghra]

Nice to see the exploit finally out.

I gave a talk about the potential for this to happen about a year ago: http://quaxio.com/jsonp_handcrafted_flash_files/

[Eridrus]

People have known about the potential for much longer than a year:

http://www.slideshare.net/guest2821a2/web-browsers-and-other...

http://www.slideshare.net/guest2821a2/web-browsers-and-other...

Actually going out and doing it is something else.