Hacker News Reader

If you wait on the main page for like 5 seconds and don't type anything, people's last 10 queries will start to fade in.

Indeed, and you'll see they don't filter the input so XSS attacks are possible.

Just enter a question of "<script>foo</script>", and reload the main index to see it happen.