HomeHome  CalendarCalendar  FAQFAQ  SearchSearch  RegisterRegister  MemberlistMemberlist  UsergroupsUsergroups  Log in  
Share | 
 

 Jason Q. Huggett, your expertise is needed

View previous topic View next topic Go down 
AuthorMessage
LL

avatar

Location : KCMO
Registration date : 2007-12-29

PostSubject: Jason Q. Huggett, your expertise is needed   Fri Sep 26, 2008 11:46 pm

Please read and translate for all non-technical BoB'ers. Sounds worrisome:

http://arstechnica.com/news.ars/post/20080926-new-clickjacking-affects-all-browsers-cause-remains-unknown.html

Thank yew.
Back to top Go down
View user profile
jhuggett
BoB's Pioneer & Founding Father
avatar

Age : 45
Location : Olympia, WA
Registration date : 2007-12-09

PostSubject: Re: Jason Q. Huggett, your expertise is needed   Sat Sep 27, 2008 12:24 am

Really not enough information to make an intelligent analysis of it but it sounds like the issue would be that they can take your "click" input and point it to whatever they want. You think you are clicking on a link to say read the next page but they use that click to say acknowledge the installation of a program. I guess by having some hidden frame over the actual content.

Problem with this kind of attack would be the site you are visiting would already have to be compromised. This is a problem already, most of our the malware you encounter is now hosted on legit sites that have been compromised. So what it would do is just expand on the amount of exploits (actual bad things) the bad guys can do once they've comprised a site.

Adobe is probably worried about this because of flash.

Still I'd have to know much more about it to make any kind of risk assessment and suggest any kind of mitigation. Usually doesn't take long after the cat's out of the bag though. People start speculating and testing things out.

_________________
Jason

"Freedom, Security, Convenience: Choose Two"
"For me, I will take freedom over security and I will take security over convenience." ~ Dan Geer
Back to top Go down
View user profile http://www.brothersofbriar.com
Carlos
Admin
avatar

Age : 60
Location : Chestnut, IL
Registration date : 2007-12-10

PostSubject: Re: Jason Q. Huggett, your expertise is needed   Sat Sep 27, 2008 8:33 am

Already there is stuff like that on Wunderground, the weather site, being used for advertisements. I have them adblocked and flashblocked. But they are always trying to come up with more.

You go to click on something and a nearly hidden ad pops up as you go to click and takes you to the ad site.

_________________


"Never turn your back on a Breen".
Back to top Go down
View user profile
Guest
Guest



PostSubject: Re: Jason Q. Huggett, your expertise is needed   Sat Sep 27, 2008 9:27 am

There are more sites with this than you would imagine

Thats why a good anti virus and a firewall other than windows firewall needs to be installed on all computers


My firewall and anti virus imediately lets me know if anything is attempting to be downloaded and only what I allow can be downloaded
Back to top Go down
jhuggett
BoB's Pioneer & Founding Father
avatar

Age : 45
Location : Olympia, WA
Registration date : 2007-12-09

PostSubject: Re: Jason Q. Huggett, your expertise is needed   Mon Sep 29, 2008 7:20 pm

Here's some more information about it.

Good post by the guy that wrote the noscript pugin for Firefox.

http://hackademix.net/2008/09/27/clickjacking-and-noscript/


A FAQ type article that covers pretty much all that is know so far.

Computer World Article

_________________
Jason

"Freedom, Security, Convenience: Choose Two"
"For me, I will take freedom over security and I will take security over convenience." ~ Dan Geer
Back to top Go down
View user profile http://www.brothersofbriar.com
 
Jason Q. Huggett, your expertise is needed
View previous topic View next topic Back to top 
Page 1 of 1
 Similar topics
-
» Milk needed in Indiana
» Milk needed for adopted baby
» milk needed for upcoming baby
» Information on Jason
» Jason Orange

Permissions in this forum:You cannot reply to topics in this forum
Brothers of Briar :: Community :: The Round Table-
Jump to: