Slashdot to the rescue: http://it.slashdot.org/comments.pl?sid=976325&cid=25157139 http://it.slashdot.org/comments.pl?sid=976325&cid=251571... My interpretati

Slashdot to the rescue: http://it.slashdot.org/comments.pl?sid=976325&cid=25157139 http://it.slashdot.org/comments.pl?sid=976325&cid=251571... My interpretation is that an attacker can make a user do something on a website, but precisely what, I don't know.