New threat: Clickjacking!

dlb · Oct 1, 2008

http://blogs.zdnet.com/security/?p=1972&tag=nl.e589
Not cool :eek VERY frightening.

musksnipe · Oct 1, 2008

Great, just when I thought I was pretty safe, now I have to worry about the flash games I play.
Can't wait to see more info on this.
Good info, dlb.

Fred_G · Oct 1, 2008

Interesting. Thanks for the linkage. Now the next time I get pwned in Counter Strike by some kid, I can say I was clickjacked! :guns

E

iwunderdownunder · Oct 1, 2008

in regards to clickjacking did read this article http://blogs.zdnet.com/security/?p=1973&tag=rbxccnbzd1

Doc13% · Oct 1, 2008

Fred_G said: ↑

Interesting. Thanks for the linkage. Now the next time I get pwned in Counter Strike by some kid, I can say I was clickjacked! :guns

E
Click to expand...

roflmao

Fred_G · Oct 1, 2008

That is not funny Doc13%, that headshot was dead on untill they Clickjacked me! :-D

E

bigbazza · Oct 2, 2008

A couple of quotes from the original link in post #1.

In a nutshell, it’s when you visit a malicious website and the attacker is able to take control of the links that your browser visits. The problem affects all of the different browsers except something like lynx. The issue has nothing to do with JavaScript so turning JavaScript off in your browser will not help you. It’s a fundamental flaw with the way your browser works and cannot be fixed with a simple patch. With this exploit, once you’re on the malicious web page, the bad guy can make you click on any link, any button, or anything on the page without you even seeing it happening.
Click to expand...

and another.

According to Hansen, the threat scenario was discussed with both Microsoft and Mozilla and they concur independently that this is a tough problem with no easy solution at the moment.

Grossman confirmed that the latest versions of Internet Explorer (including version 8) and Firefox 3 are affected.
Click to expand...

Read the articles for more.

Bazza

wildwolf220 · Oct 2, 2008

musksnipe said: ↑

Great, just when I thought I was pretty safe, now I have to worry about the flash games I play.
Click to expand...

Bad muskieLOL :-D
http://bestsmileys.com/flasher/1.gif

oma · Oct 2, 2008

Is Clickjacking the same as Clickspring? If that's the case, superantispyware added it to their list of updates.

Doc13% · Oct 2, 2008

oma said: ↑

Is Clickjacking the same as Clickspring? If that's the case, superantispyware added it to their list of updates.
Click to expand...

http://www.sophos.com/security/analyses/adware-and-puas/clickspring.html

Clickspring is adware

clickjacking is a browser exploit

Rikky · Oct 2, 2008

musksnipe said: ↑

Great, just when I thought I was pretty safe, now I have to worry about the flash games I play.
Can't wait to see more info on this.
Good info, dlb.
Click to expand...

No you just have to worry about the sites you play them on.

Same :crap different day.

Speculant · Oct 5, 2008

WHAT???

this means that the torrentz/warez/pr0n/shady shopping sites i visit all the time aren't SAFE anymore??

oh no!!!

/sarcasm

oma · Oct 10, 2008

From what I can see, this is the latest on clickjacking: http://news.cnet.com/8301-1009_3-10061358-83.html

augiedoggie · Oct 10, 2008

Firefox add-on blocks 'clickjacking' attacks- Computerworld

NoScript prevents the interaction from completing and reveals [to] you the real thing in 'clear,'" he said. At that point, users can decide for themselves whether to continue clicking, or free up the mouse from the underlying -- and potentially exploitive -- content.
Click to expand...

musksnipe · Oct 10, 2008

That's good news and is installed now!

LauraR · Oct 11, 2008

Link for No Script: https://addons.mozilla.org/en-US/firefox/addon/722

bigbazza · Oct 24, 2008

Microsoft have apparently released patches for each different verion of their Os's back to Windows 2000 including 64-bit versions.

Go to http://windowssecrets.com/comp/081024 newsletter for the latest news and a link at the bottom of page 2, to 9 patch updates depending on your OS.

This is a special Newsletter from Windows Secrets as they consider the release so important.

Bazza

bigbazza · Oct 24, 2008

Re-reading the newsletter more thoroughly, it appears that MS patch relates to Virus protection. Even so, it is SO important that Microsoft (and Windows Secrets ) released an out-of-cycle patch (newsletter) to fix the problem.

To quote from the article by Susan Bradley in the Windows Secret newsletter:-

With little warning, Microsoft released yesterday an unscheduled or "out-of-cycle" patch for a highly critical vulnerability that affects all versions of Windows.
Click to expand...

Bazza

Log in or Sign up

New threat: Clickjacking!

dlb MajorGeek

musksnipe Guest

Fred_G Heat packin' geek

iwunderdownunder First Sergeant

Doc13% aka Kestrel13! aka Emms

Fred_G Heat packin' geek

bigbazza R.I.P. 14/12/2011 - Good Onya Geek

wildwolf220 Oracle of Doom

oma MajorGeek

Doc13% aka Kestrel13! aka Emms

Rikky Wile E. Coyote - One of a kind

Speculant The Confused One

oma MajorGeek

augiedoggie The Canadian Loon - LocoAugie (R.I.P. 2012)

musksnipe Guest

LauraR MajorGeeks Super-Duper Administrator Staff Member

bigbazza R.I.P. 14/12/2011 - Good Onya Geek

bigbazza R.I.P. 14/12/2011 - Good Onya Geek