Where you should disclose your vulnerabilities. Go read
RFPolicy if you want to do responsible disclosure, and go here for when all else fails.
Hijacking Safari 4 Top Sites with Phish Bombs
Date: August 11, 2009 08:50PM
Hello my fellow ha.ckers,
this is an issue i got fixed in safari 4 browser today with latest update 4.0.3. using this vulnerability, you can inject phishing sites into the flashy top sites feature of Safari 4. Check it out here - http://securethoughts.com/2009/08/hijacking-safari-4-top-sites-with-phish-bombs/
-
Inferno
SecureThoughts.com