yifan.lu is online right?
Strange, I can't connect to it right now.
==> solved. my bad. some dumb DNS problem.
Thanks yifanlu.
BTW, wouldn't Amazon try to closed the exploit in, say, 3.1.1? I mean, since it wouldn't take much to fix (break in my view, of course) the bug, only a couple of double quotations would do. (It's a dumb question, I know

)