Spyjax: Your Browser History is Not Private!
This is a scary use of ajax: to view the browser history of all your site's visitors. Spyjax exploits a simple feature of all browsers: changing the color of links for sites you've visited. A piece of javascript on a webpage can view the color of these links to determine whether you've visited a site.