First off, this is bad behavior on Ajaxian's part, and they should learn that people will appreciate them just as much (more, actually) if they send the user off-site to the content they're pointing at.

Second, shouldn't it be possible for Roman to prevent another site from embedding his IFRAME? Either catching the window.parent.location in JavaScript or only serving the IFRAME page if his own domain is in the referrer?