XSS evolution???

Black Hat DC researchers demonstrate new cross-site scripting browser hack that lets attackers retrieve data without a trace.
A pair of researchers has combined cross-site scripting (XSS) and anonymization techniques to build a framework that lets an attacker gather Web content incognito.

Origine de l’article :
http://www.darkreading.com/security/vulnerabilities/showArticle.jhtml;jsessionid=V34EUP2TVHWUGQSNDLPSKH0CJUNN2JVN?articleID=214502153