Here is the summary of a hacker on how he did it (you have to click you're 18 years or older to access it):
http://community.livejournal.com/bru...y/3168992.html
I'm not good at technical details on feasibility of such an attack, so maybe someone more knowledgeable can read it and say if it makes sense.