Eric's weblog - Will Ajax get another bad rap? Yahoo worm

Here's an interesting set of articles about Ajax security ("Samy worm").

Also, Eric showes there a workable soliution for implementing timeout warnings for session expiration.