Breaking News in Brazil

http://googlediscovery.com/2010/09/25/bug-no-orkut-afeta-milhares-de-usuarios/

Google Brazil statement:

<< We are actively working to fix a cross-site scripting (XSS) vulnerability on orkut.com that was discovered several hours ago. Our initial analysis of the script code did not reveal any malicious activity; nonetheless, we advise orkut users to temporarily disable Javascript to help protect their accounts while we work on a fix. >>

http://googlediscovery.com/wp-content/uploads/orkut_script_pegadinha_malandro.jpg