The venerable internet browser has a mechanism for preventing its subversion by one domain of another. So called, Same Origin Policy. In this talk we'll explore situations where this mechanism breaks down. - Can an afflicted browser eviscerate your internal networks? - Can mobile apps become be turned, to ransack your cloud data?