kudos devs
First "hack" I've allowed to run on my iPhone, very easy once it actually ran. I probably went to the site 10 times before I realized that it was supposed to shut down Safari. It was a bit unstable for a while until I had turned the phone off and on a couple times. Now, everything(including youtube) seems to work as usual, I'm an AT&T customer, so maybe that has something to do with it.
The next time you go to the site after installing, you will just see a little ? where the broken TIFF image is since the exploit has been fixed.
The first app I installed was PONG, I found that it would just quit out immediately so I left it at that for a while, uninstalled iPong and did a bit more reading. I noticed everyone was recommending installing BSD Subsystem, so I installed that and once I did, PONG worked, so there must be some files that pong uses but doesn't install through Installer.app. I also noticed that you can't uninstall BSD subsystem, this might be because Pong relies on it, or it just might not be an option for this package because the only option I see is to Reinstall it.
The next thing I installed was Community Sources, which is a library of software not created by the Installer.app people. You get a little warning about not installing software from people you don't trust...a good recommendation.
Anyhow, it seems stable now and looks like there's some "cute" apps, but nothing I would really NEED. I know there was a thread a while ago that talked about the apps that were keeping people from upgrading to 1.1.1 before it was hacked so I'll have to dig that up and try some of those out. I do wish Navizon was free/released by apple and integrated into Maps.app.
Also, I'm wondering what Apple could do if you said a friend sent me a link and I clicked it on my iPhone, next thing I knew I had another icon on my homescreen. Certainly someone could have constructed a much less friendly website that just directed straight to the .tif image without the nice menu. Since Apple has known about this flaw for a while and not plugged it up, it seems like it would be their fault that a website is able to do this.