I object to the title here. If this is "hacking", then this site really needs to start calling itself "Hacker" News. homakov has just done some damn fine work,

I object to the title here. If this is "hacking", then this site really needs to start calling itself "Hacker" News. homakov has just done some damn fine work, and it deserves actual discussion, not dismissal and downvotes. Honest question: could many of these have been addressed if the browser simply didn't send a cookie along with a post or get to a domain that violated the usual same-origin rules? At a glance, it looks like most of the sites are receiving some kind of account or session information from the browser, with Slideshare being a notable exception (they just flatly Did It Wrong).