Youtube (brought to you by Google) does two of those no-nos: 1) It displays ads that appear on a site with a countdown blocking you before the content loads. 2) It auto-plays video ads with sound. So Google should, by definition block Youtube ads, which it won't. So cynical! How long until Google loses all the sympathy it gathers in its young years?

Schneier mentions this vulnerability as a real threat on his blog. https://www.schneier.com/blog/... Did he actually endorse anything that says it isn't? (The link on the main page of slashdot.org claims he did.)