This is basically just a video version of this:<p><a href="http://blog.metasploit.com/2010/01/reproducing-aurora-ie-exploit.html" rel="nofollow">http://blog.metasploit.com/2010/01/reproducing-aurora-ie-exp...</a><p>posted earlier as:<p><a href="http://news.ycombinator.com/item?id=1055986" rel="nofollow">http://news.ycombinator.com/item?id=1055986</a><p>which already has some discussion. If you're interested in how the vulnerability actually works, there's a Haml reduction of what may be the core cause (a DOM object lifecycle bug) posted on that thread.<p>I'm also not sure it's been established that this code is what got the attackers into Google, although it appears to have gotten them Adobe.