I have produced an exploit, based on Thor's advisory about the OBJECT Cross-Domain scripting attack, that allows users to read some types of files (e.g, INI, BAT, ...) that aren't normally readable through most vulnerabilities. The exploit is available at: http://www.murphy.101main.net/localread.htm "The reason the mainstream is thought of as a stream is because it is so shallow." - Author Unknown