Hacker News Reader

Most everyone doing lots of web apps gets bitten by XSS at some point. Nothing embarrassing about it IMHO.

But Google has probably hired ten PhDs just to make sure none of their products gets exploited like this.

But the PhDs failed. Thus, it's newsworthy.

Hiring PhDs for this task was their first mistake.