The Invisible JavaScript Backdoor

A later submission is being discussed: https://news.ycombinator.com/item?id=29170954 (153 points, 23 comments).