No matter how many articles I read about XSS attacks (a.k.a. cross-site scripting attacks), I can never get enough of them. Here's a good one from InformIT that narrates a hacker-for-hire's attack on a client's web application; he starts with a simple login form and ends up pretty much in total control after a short amount of time: "XSS, Cookies, and Session ID Authentication – Three Ingredients for a Successful Hack [1]", by Seth Fogie.

If this is your first XSS article, it will be a wake-up call. :-) I like to keep reading them to keep reminding myself to stay vigilant, and to learn as much as I can.

Dan