chown typically doesn't work if you are not root. Otherwise, you could make something setuid, then chown it to some other user's ID and create all kinds of mischief.

--Bob Niederman, http://bob-n.com