Over on Boing Boing Gadgets, our Joel's blogged about Wired Threat Level blog pranking the CIA by exploiting a cross-site scripting vulnerability in the Agency's website:
Threat Level utilized a relatively benign vulnerability in the CIA.gov web site to insert one of their stories into the URL, giving the appearance that the content is hosted by the agency's site. Their choice of story to inject into the CIA.gov web site is priceless, too: "U.S. Has Launched a Cyber Security 'Manhattan Project,' Homeland Security Chief Claims"
I have such a grin right now.
Link,
