What would be very interesting is to set up an open WiFi access point which alters any HTTP response from an unknown MAC address, inserting a local copy of the script tag right before the /head tag. You could also prank your friends with this by installing it as a GreaseMonkey script or a Chrome extension.