Don't forget about the javascript exploit that they can inject this with for macs