The massive Twitter "onMouseOver" attack on Tuesday may have been triggered by a Japanese hacker who claimed he wanted to expose a cross-site scripting flaw on the site.

Google is constantly combatting search engine spammers (I know some to do not like to be called this, so sorry). This past update, they began blocking an other type of spam named onmouseover ...

Turn off JavaScript for Twitter! Update 2 (14:13 CEST): It is possible to load secondary JavaScript from an external URL with no user interaction, which makes this definitely wormable and dangerous.

Twitter said that the XSS flaw -- known as the 'onMouseOver' flaw for the type of JavaScript used in the attack -- was one that the company had already identified and patched in August, but was ...