One new technique that's notably missing, and egregiously abusable, is browser notifications. Several times a day now I'll go to a web site that immediately pops up a browser-native non-modal notification asking for permission to use the browser's built-in notifications system.