New internet danger: clickjacking, a CSRF variant that's difficult for trusted sites to defend against. As usual, NoScript protects you.
About Me
Shared items
Friends
Archive
-
▼
2008
(70)
-
▼
Oct
(19)
- auditory processing disorder
- I would love to believe in the heralded adhocratic...
- Well, my team got third in region in the ICPC. The...
- That's not quite the graphical presentation of hum...
- Beautiful use of a transparent overlay in this ani...
- Interesting psychological tests from Harvard:Moral...
- It's funny that intellectuals can openly not only ...
- Today's Penny Arcade newspost, "The Great Divide",...
- So I think I'm going to do the International Colle...
- 60% chance of snow this Saturday. Ugh. I'd like ne...
- "History of $X" classes drive me nuts. It's imposs...
- Quick teacher's-pet project for Discrete Math: fac...
- dear readers
- New internet danger: clickjacking, a CSRF variant ...
- I've enjoyed Will Wilkinson's liveblogs of the Pre...
- Huzzah, Ben Folds' Way to Normal is out. (And it's...
- The use of "probably" in this t-shirt ad from a so...
- I'm impressed how good the Google Sets results are...
- I was commenting on a blogger post just now, and I...
-
▼
Oct
(19)
1 comments:
Full details. It's worse in some ways than I'd guessed--camera and microphone control, completely invisible overlays even with Javascript disabled--but on the bright side, it sounds like trusted sites can protect themselves simply by detecting that they're in a frame and busting out of it.
Post a Comment