Hacker News Reader

Some user was able to open a browser modal with a custom message in everyones browser. Any ideas how they did that?

The author of the site was naughty and didn't do any sanitization :) They said they've fixed it in another comment, though.