One extra ampersand in code leads to IE8 exploit | Hacker News Reader