Virtual machine escape fetches $100k at Pwn2Own hacking contest
<i>"All started from and only by a controlled a website"</i><p>That is <i>really</i> scary. And another reason to limit/disable JavaScript (if somebody still don't find enough). Has anyone found more detailed report? I'd love to see this in action.