SecurityRatty: Clickjacking causing Browser woes

This is cache of http://spywarebiz.com/spywarebizblog/?p=641. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Clickjacking causing Browser woes

2008-10-12 23:16:28 by Doug Woodall in The Spyware Biz Blog

The article is a good explanation of what happens with Clickjacking and how to take steps to defeat it.

clipped from peterhgregory.wordpress.com

Stop “clickjacking” with Firefox and?NoScript

Clickjacking is one of the newest and most dangerous web browser vulnerabilities discovered to date. Every browser is vulnerable, even those that can defend against the similar Cross Site Request Forgery (CSRF) vulnerability.

How clickjacking works: when you visit a compromised web site, your browser loads an invisible button that hovers below the mouse pointer. When you visit a legitimate site like online banking or e-mail, when you click on a link, you’re actually clicking the invisible button placed there by the malicious code. As explained by Jeremiah Grossman, CEO of Whitehat Security: