a new pop-up hijack proof of concept popped up on secunia today (http://secunia.com/) and all the popular browsers are listed as being vulnerable. looks like someone can inject a frame into a target window if the window's name is known. as usual don't be an idiot playing with your money or doing anything important online