Hacker News Reader

There's a HTTP response header that a site can return to allow cross-domain ajax. I don't recall the details off the top of my head.

Access-Control-Allow-Origin, aka CORS.

This solves all issues but unfortunately is not well supported in the older browsers :(