tedster - 4:32 am on Aug 4, 2009 (gmt 0)
As I mentioned above, in the hands of a certain type of person, this is still a threat. It's not just theory, I've seen the examples. The past two updates seemed to open up more vulnerability than was there before, but I do expect Google to minimize it again. There may well be edge cases slipping through for quite a while, but I don't see that kind of successful attack as something that can be done casually.