Excellent writeup of the technical details behind the lastpass security scare. Especially crazy: "foo.bar can be made to resolve with a <form> element with a child <input> element with name=bar."