How the HTTPS-snooping, email addy and SSN-raiding HEIST JavaScript code works
No middleman required to ding sites for info Black Hat Malicious ads can potentially masquerade as people online and grab their personal information from HTTPS-protected websites, two boffins have shown."