http://www.watchfire.com/resources/Overtaking-Google-Desktop.pdf

http://www.net-security.org/dl/articles/Scanning_Ajax_for_XSS_entry_points.pdf