Great piece, but I'm now reasonably certain that clicking around in the SBNation comment section got my Netflix account hacked in some sort of CSRF. It's fixed now, but I won't be visiting that site again outside of incognito mode... although I guess this would be more Netflix's fault.

The Netflix agent assured me that this could only have happened if my "email got hacked". Hmmm, I'm not sure that Netflix is the high-value target there...