Ad hacking -- watch out (or use NoScript)