Mike Bailey and I discussed CSRF: Yeah, It Still Works at DEFCON 17 on Saturday, August 1st, 2009 at 1100. Presentation slides here . Links to all the PoC videos are in the presentation.