The specific, exploitable defects to Web 2. 0 sites and applications. The flexible ability of Web 2. 0 sites to absorb new content (especially from unvetted users) combined with the vulnerabilities in browsers, protocols, and programming techniques make it easy for hackers to compromise legitimate sites. For example, invisible code could be planted within a web page to redirect viewers from a legitimate site to a malicious one.