Got to love a security guy who:

#1:Drops 0day about stupid stuff in JavaScript in the web interface for 65000+ consumer routers

#2:Includes a link to his web startup (conveniently in beta, surprise suprise)

#3:Has stupid/insecure stuff in his own JavaScript, such as 115K of unused JavaScript template code and fun gems like:

var user_data = {"logged_in":0};

Wow! Keep it classy Dave! And you might want to read about Doloto...