Comment Re:This is just evil. (Score 1) 166
In other words, there has to be a bug on the client that lets the web page run arbitrary code
Yep, that's called a browser. Arbitrary code is exactly what a webpage or video is. This is the exact reason driveby malware via ad networks still happens. If you have ISP level access and can inject malicious code in unencrypted pages, you win. The solution to this, from a web hosts view, is to encrypt everything.