There are a thousand more or less easy ways to pull this, but it is hard to stay unnoticed at this scale. You'd guess that every plugin/toolbox/freeware used by

There are a thousand more or less easy ways to pull this, but it is hard to stay unnoticed at this scale. You'd guess that every plugin/toolbox/freeware used by hundreds of thousands of people is running on some test-boxes/honeypots set up by security companies/browser-vendors.