I was on Pirates Bay today looking for Ramones and came across a nifty page where someone had put a nice XSS hack on it (people can post comments on Pirates Bay about each Torrent). It tried to send an email to everyone in my address book. But I do not have email on this box so it threw an error message. *whew*
Morale of the story, be careful.
Oh, and yes: I do buy the CD's after sampling them. I do not like buying unknown product, however.