Hacker News Reader

Sounds like creating an url like aspnet_client/admin.php returning a WebObjects header might be a good hobby

Add in a zip bomb or two?

Now you have me wondering how badly http gzip content compression can be abused along those lines.