Yup, I'm at CanSecWest now. This doesn't say much except that he just brought a ready, armed exploit and just took the prize. Nils' breaking of the browser trifecta was quite impressive though.