Illustration by Mark Todd In May, Web security consultant George Deglin discovered a cross-site scripting (XSS) exploit that involved Facebook’s controversial Instant Personalization feature. The ...

Typically, writing programs for Web browsers means that you don't have access to a user's computer and file system. But by using ActiveX objects on Microsoft Windows and Internet Explorer, you can ...