I'm having a bit of trouble parsing the post. Did he just discover CSRF and is trying to raise awareness? Or did he discover a new variant of CSRF that makes pr

I'm having a bit of trouble parsing the post. Did he just discover CSRF and is trying to raise awareness? Or did he discover a new variant of CSRF that makes previous counter-measures ineffective? For completeness, Rails guide covers these security holes http://guides.rubyonrails.org/security.html#cross-site-request-forgery-csrf http://guides.rubyonrails.org/security.html#cross-site-reque...