Aleksey Kolupaev

Very new and sexy implementation of city site in 2.0 style - http://www.mapjack.com/

here

Cross-site request forgery, also known as one click attack or session riding and abbreviated as CSRF (Sea-Surf) or XSRF, is a type of malicious exploit of websites. Although this type of attack has similarities to cross-site scripting (XSS), cross-site scripting requires the attacker to inject unauthorized code into a website, while cross-site request forgery merely transmits unauthorized commands from a user the website trusts.

more

Learn how to make it fast.
Yahoo
Highscalability (video inside)

Finally at paper

Раз, два, три.