@b0rk web-based injections attacks make a bit more sense, given that this was part of the basis for stuff