Dangers of crossdomain (crossdomain.xml) for flash
Chris Shiflett recently posted an article on crossdomain.xml and the dangers of allowing cross-domain Ajax requests. Something to keep in the back of your mind when using public services or crossdomain.xml services. Flickr, Youtube, Yahoo and Amazon are all fixing/fixed this issue. In short separating out the public service for API that operates to its own domain is enough to stop this potential security vector.
