Slashdot Mirror

← Back to Stories (view on slashdot.org)

Busting, and Fixing, Frame Busting

Posted by kdawson on from the don't-frame-me-bro dept.

An anonymous reader writes "A study presented last week at the IEEE Web Security and Privacy workshop shows that frame busting code used at popular websites is easily circumvented. Frame busting is a widely used technique to prevent clickjacking attacks. The researchers propose better frame busting code and suggest that websites migrate to this new code."

1 of 111 comments (clear)

  1. Re:Better Yet by Monkeedude1212 · · Score: 1, Redundant

    I know. I tried hosting a website back around 2002, I was about 14 so I didn't have total knowledge of how it all worked but I wanted to see if I could successfully run something online with the money I'd saved from a minimum wage job.

    I had it going for a solid 9 months, before some jerk opened my web site from a frame, executed some bad code and crashed my server. Fix it all up but for whatever reason he'd keep attacking it. Having school to deal with, I didn't put forth the effort to fight back or put security around it, so I stopped hosting it.

    I have hated Frames ever since. Surmak mentioned the Java API's, which I admit I do use frequently enough, but even that I keep stored locally.

    I don't see anything -WEB BASED- that requires a frame.