Following the very interesting Android Browser Cross-Application Scripting disclosure (CVE-2011-2357) by Roee Hay and Yair Amit, Adi Sharabani and I gave a presentation explaining the vulnerability at the Google Technology User Group - Tel Aviv meeting (thanks for having us!).
>> You can view our presentation here <<