05/01/2003: "Cross Site Scripting (XSS) is everywhere."

There are many tricky techniques to gain information from people or webservices. An underestimated threat is the so called cross site scripting. But besides password stealing and cookie theft there are sometimes amusing stories related to this topic. Nice things may happen if you combine XSS with referrer spoofing. It's really easy to hijack unprotected blogs through malicious JavaScript code, as shown at kasia in a nutshell.
That's a nice one, but be aware the manifold other possibilities to break into your privacy! Every email, guestbook, forum, trackback, search form, error page, keyword & referrer statistic etc. is in potentially danger. You have be warned!