Hi,

not allowing loadvariables from another server is a security feature, and I dont think it will change in F6.
The reasoning behind that: suppose someone sends you an ad banner to show on your site. If it comes with a suggested html embedding, you can check that for strange javascript, but you probably cannot check what goes on inside. Now assume you make a completely flash site and integrate that flash banner via loadmovie from your server. Without that restriction the banner could perhaps check periodically whether the main movie has variables user and password and send the values off without your knowing.
Obviously there is no restriction on loadmovie because one would expect loadmovie to show up as graphics, but this is not always the case.
Also, access to any servers works when you test within flash environment or with a file: url in browser - otherwise you would never be able to test your stuff without running a server. Once you run your own server and use http://localhost to load your movie, those restrictions apply.
You actually have a copy of your main swf at the at-lantis site to try out?

Musicman