I just read this morning about a flaw Google had in its Gmail system. It was uncovered by a 14-year-old boy called Anthony. Google seems miffed that he decided to make it public instead of telling them directly. It might be to save some face – or to ensure the word doesn’t go around among XSS hackers. I think he decided to post it his way because Google supposedly doesn’t reply to say thanks after helpful people have identified security holes in its system.