Initially it was postings and sig links now its hacks to browser user agents. See the full story here.
http://www.f-secure.com/weblog/archives/00001684.html
Not sure if this hack is limited to mozilla browsers or all browsers. FF has had a user agent plugin for years.
