A browser exploit that exploits them all! - GoFuckYourself.com

StuartD · 09-26-2008, 12:16 PM

http://blogs.zdnet.com/security/?p=1972&tag=nl.e589

Researchers are beginning to raise an alarm for what looks like a scary new browser exploit/threat affecting all the major desktop platforms ? Microsoft Internet Explorer, Mozilla Firefox, Apple Safari, Opera and Adobe Flash.

The threat, called Clickjacking, was to be discussed at the OWASP NYC AppSec 2008 Conference but, at the request of Adobe and other affected vendors, the talk was nixed until a comprehensive fix is ready.

mikesouth · 09-26-2008, 12:36 PM

can you say Zango

uno · 09-26-2008, 12:38 PM

know anything specific Stuey?

TheDoc · 09-26-2008, 12:45 PM

I think this has been going on for awhile, years..

I use click heat maps all over the place, one of them being on my warning page. I found that people kept clicking the words/text in the body that wasn't linked. Words like, Sexually Explicit, along with other very common words.

So, what I did was set a span tag on the words to split them up and changed a few words to graphics.

What I found was people quit clicking on the words. So, by simple deduction I came to the conclusion that some spyware/virus, toolbar, ect was replacing popular words on my warning pages, with links - that people would click.

Pretty much from that point I knew that some how, some way, people could steal clicks too and I would have no way of knowing it.

So hearing about this now finally means it will be corrected.

StuartD · 09-26-2008, 12:54 PM

Quote:

Originally Posted by uno

know anything specific Stuey?

Not a whole lot as the guys who discovered it and the companies that are aware of it are all being very tight lipped about it. But apparently it's something very inherent with how all of the browsers work so a patch won't fix it.

Here's a "guess" at what it's doing:

http://www.webadminblog.com/index.ph...psec-nyc-2008/

WiredGuy · 09-26-2008, 01:13 PM

Wow, seems quite serious that nobody can talk about it. I look forward to seeing what it is as it seems no fix is going to be available for some time either

WG

09-26-2008, 12:16 PM	#1
StuartD Sofa King Band Join Date: Jul 2002 Location: Outside the box Posts: 29,903	A browser exploit that exploits them all! http://blogs.zdnet.com/security/?p=1972&tag=nl.e589 Researchers are beginning to raise an alarm for what looks like a scary new browser exploit/threat affecting all the major desktop platforms ? Microsoft Internet Explorer, Mozilla Firefox, Apple Safari, Opera and Adobe Flash. The threat, called Clickjacking, was to be discussed at the OWASP NYC AppSec 2008 Conference but, at the request of Adobe and other affected vendors, the talk was nixed until a comprehensive fix is ready. __________________ This is me on facebook This is me on twitter

09-26-2008, 12:36 PM	#2
mikesouth Confirmed User Industry Role: Join Date: Jun 2003 Location: My High Horse Posts: 6,334	can you say Zango __________________ Mike South It's No wonder I took up drugs and alcohol, it's the only way I could dumb myself down enough to cope with the morons in this biz.

09-26-2008, 12:38 PM	#3
uno RIP Dodger. BEST.CAT.EVER Industry Role: Join Date: Dec 2002 Location: NYC Area Posts: 18,450	know anything specific Stuey? __________________ -uno icq: 111-914 CrazyBabe.com - porn art MojoHost - For all your hosting needs, present and future. Tell them I sent ya!

09-26-2008, 12:45 PM	#4
TheDoc Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Location: Currently Incognito Posts: 13,827	I think this has been going on for awhile, years.. I use click heat maps all over the place, one of them being on my warning page. I found that people kept clicking the words/text in the body that wasn't linked. Words like, Sexually Explicit, along with other very common words. So, what I did was set a span tag on the words to split them up and changed a few words to graphics. What I found was people quit clicking on the words. So, by simple deduction I came to the conclusion that some spyware/virus, toolbar, ect was replacing popular words on my warning pages, with links - that people would click. Pretty much from that point I knew that some how, some way, people could steal clicks too and I would have no way of knowing it. So hearing about this now finally means it will be corrected. __________________ ~TheDoc - ICQ7765825 It's all disambiguation

09-26-2008, 01:13 PM	#6
WiredGuy Pounding Googlebot Industry Role: Join Date: Aug 2002 Location: Canada Posts: 34,469	Wow, seems quite serious that nobody can talk about it. I look forward to seeing what it is as it seems no fix is going to be available for some time either WG __________________ I play with Google.