I have a guy at work that boasts he had "hacked"(cracked?) social networking sites like facebook and claims he knows more about "hacking" than anyone else at the office. When I asked what language he used for this "hacking", he thought for a while and replied "HTML".
When I asked if it was JS, he insisted that it was pure HTML.

Has anyone here encountered such script kiddies?. How do you deal with them?.