http://em386.blogspot.com/2010/06/its-2010-and-your-browser-has-assembler.html
Its 2010 and your browser has an assembler
这篇文章很有水平,我没怎么看懂,
http://www.matasano.com/research/Attacking_Clientside_JIT_Compilers_Paper.pdf
另外一个相关的牛人的blog
http://www.corelan.be/index.php/about-me/