Today, "thanks" to a comment spam I received, I discovered that one can just post comments on linux.com containing JavaScript. The programmer who allowed for such a security hole should be very, very ashamed.