Slashdot Mirror
Alarm Raised For "Clickjacking" Browser Exploit
Shipment Date writes "ZDNet's Zero Day blog has some new information on what looks like a scary new browser exploit/threat affecting all the major desktop platforms — Microsoft Internet Explorer, Mozilla Firefox, Apple Safari, Opera and Adobe Flash. The threat, called Clickjacking, was to be discussed at the OWASP conference but was nixed at the last minute at hte request of affected vendors. From the article: 'In a nutshell, it's when you visit a malicious website and the attacker is able to take control of the links that your browser visits. The problem affects all of the different browsers except something like lynx. The issue has nothing to do with JavaScript so turning JavaScript off in your browser will not help you.'"
*crickets*
I knew there was a reason I liked lynx
i have a roll of electrical tape.
was some weird mouse-mastubation scenario. *shudders*
Oh great. Expect a resurgence in rickrolls. No one can protect you!
Finally I have a legitimate excuse for all the pr0n sites that are in my browser history. No honey, it isn't me, it's a browsers exploit! I swear!
It's very similar to the DNS issue from a couple of months back: It's a hugely scary thing that will doom the Internet, but because we're responsible we can't tell you what it is in any detail. However, if you don't patch your browser immediately (patch not yet available), you are fucked.
Have a nice day.
i didn't even click on this story; someone must want me to read this...
The summary clearly states that only lynx is not affected. It's pretty obvious what's going on here: the exploit is a nefarious plot to make everyone switch over to lynx, thereby crippling the non-text-based porn industry.
I knew that sticking with ASCII porn would pay off someday.
Details at 11.
The exploit was first discovered at about 7:30 am after blogger Ryan Naraine's boss noted several "odd" adult sites appeared in mister Nariane's browser history.
So far, the exploit seems confined to browsers on Mr. Nariane's desktop, so users of effected browsers are urged to apply all public OS/browser patches and to stay away from Ryan's desktop.
For additional support information. Click this link. LOL
...I did click it. What a useless article.
It's a fundamental flaw with the way your browser works and cannot be fixed with a simple patch.
Oh no! There's nothing we can do!
In the meantime, the only fix is to disable browser scripting and plugins.
Uh... wha? I thought it didn't have to do with browser scripting and plugins?
So it's big and scary and you can't protect against it, except by taking basic precautions to protect yourself against it. I see.
You mean like the way the new Slashdot interface causes a lot of the comments to overlap, so you think you're clicking on that +3 Interesting one and you end up clicking a -1 Troll on the RNC veep candidate in a bikini...except much worse, I mean.
I use irony whenever I can, but my shirts are still wrinkled...
Don't trust that link!
i still don't get it. could you give an analogy involving cars?
Sounds like our economy right about now.
Give me Classic Slashdot or give me death!
Is that a crisp, clean Adobe lager with a nice finish?
You can't talk about Wikipedia's flaws on Wikipedia
I recommend immediately that $700B be transferred to the browser companies to fix this problem. Furthermore, we must transfer this money by end of the week with no strings attached.
Something Witty Goes Here
That's Google's first browser :-)
http://googlesystem.blogspot.com/2006/03/google-browser.html
"sticking"
TMI
Better? :-P
Well, That's better than simply turning on the radio when you needed to eject.
I hate to burst you bubble, but it does not mean I'm 12. It means that I'm older than sin.
You young'uns these days just don't understand anything that has a black rope coming out the back. It's got to be all "txtm3 or gtfo". 4COL. Well, @TEOTD I have a message for you, young man! GOML* and GAL! --AKAIB
* Get Off My Lawn
HikingStick says: " ... and you end up clicking a -1 Troll on the RNC veep candidate in a bikini...except much worse ..."
You mean DNC veep Joe Biden in a bikini?