[Joe_Crawford]At a BarCampLA I asked Dan Kaminsky (who I didn't know really) what's the least-thought-about but most dangerous security vulnerability sites have and he replied that accepting uploads--usually profile photos--is worst because it seems so simple.