Simon Willison’s Weblog

How the myspace SWF hack worked. If Flash is a vector for XSS, is this the end of Flash badges?

Posted 17th July 2006 at 6:04 pm

Recent articles

Vibe engineering - 7th October 2025
OpenAI DevDay 2025 live blog - 6th October 2025
Embracing the parallel coding agent lifestyle - 5th October 2025

flash 69 myspace 19 swf 4 xss 60

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe