On: Hackers claim $10,000 prize for breaking into StrongWebmail

[tybris]

I'm guessing they used XSS to perform the man-in-the-middle attack and snatch the username+password+security code, but initially it didn't work on the journalist's computer because he had NoScript installed.

[icey → tybris]

On my first read, I thought it was just shoddy editing, but I think you're definitely on the right track with this.