Hacking autocomplete
Jeremiah Grossman demonstrated a rather easy hack to steal a username and password from within a browers auto complete. He also displayed a way to do cookie exhaution for browsers. Good talk as always.