Hacker News Reader

Same experience here. The guy even hotlinked our Javascript files. Little did he know that we could have controlled his website from where we were.

alert("we steal");

You only trigger the alert on 1% of page loads, otherwise they fix it quickly. ;D