From: "Geo" 

"John Beamish"  wrote in message
news:op.thx7ioymm6tn4t{at}dellblack.wlfdle.phub.net.cable.rogers.com...
> Would it be possible to visit a "poison" site that causes a keystroke
> logger (in, say, a hidden frame or some such) to trap and transmit back to
> "home base"?

Typically that's what cross site scripting exploits are. It looks like the
real site but it's not, may even pass you on to the real site after you
enter your login info.

Geo.

--- BBBS/NT v4.01 Flag-5