Identity protection outfit LifeLock picked, popped

Refer-a-friend page gets new 'feature'

Security researchers Eric Taylor and Blake Welsh have disclosed a cross-site scripting vulnerability in US identity protection company LifeLock."