Who knew that XMLHttpRequest's same-origin policy might one day be humanity's last line of defence against unfriendly AI :)