Clickjacking

Angua2

Hiyas. Apologies if there's a thread on this already (pointers please to finding it - ta :beer: )

Has anyone read - more to the point - digested the news about "clickjacking" and its implications for browsing/being online?

ZDNet article title: "Clickjacking: Researchers raise alert for scary new cross-browser exploit"

"Researchers are beginning to raise an alarm for what looks like a scary new browser exploit/threat affecting all the major desktop platforms — Microsoft Internet Explorer, Mozilla Firefox, Apple Safari, Opera and Adobe Flash."

So, is this scaremongering or useful warning of upcoming problems? AND [edit] where does one get free, reliable info on things like this?

Marty_J

Interesting stuff. I don't think there's anything like this in the wild yet, so it's probably a bit early to start worrying about it now, but it's certainly something to keep an eye on.

Angua2

Marty_J wrote: »

Interesting stuff. I don't think there's anything like this in the wild yet, so it's probably a bit early to start worrying about it now, but it's certainly something to keep an eye on.

What seems odd is how this is getting reported - evidently 2 specialists'* research/information is being squashed... ?

*they're called 'security researchers' and 'hackers' in the same article... lol

See also:
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9115700&intsrc=news_ts_head

http://www.macworld.com/article/135587/2008/09/clickjack.html

aliEnRIK

Its nearly always 'hackers' that find this stuff. Just because theyre 'hackers' doesnt mean they are bad people (Though obviously thats a grey area). They hack simply to point out flaws sometimes

I certainly wouldnt be suprised if this is possibly anyways