The Next Web

» Like online games? Beware of ClickJacking – The Next Web

   

Like online games? Beware of ClickJacking

Ernst-Jan Written on 8th October 2008                                                                                                              2 COMMENTS some text
Ernst-Jan Pfauth, editor in chief

Most web-based games might appear innocent, but a blogger from GUYA.NET proves that they can function as a way for the web’s bad guys to take over your webcam. When this blogger first heard about this phenomenon clickjacking, he tried to develop a game that could do the same thing. He discovered that the Achilles heel of Flash was the Flash Player Setting Manager. Nice piece of citizen journalism.

By creating some sort of overlay in a Javascript Game, users just think they’re trying to click a button as fast as possible. What they really do, is granting some voyeur access to their web cam. Check it out:

Kudos for Adobe, who fixed this problem by “framebusting the Setting Manager pages“. Supposedly, 99.9% of the users are protected from spies, pervs, or whatnot. The issue still exists for Java, SilverLight, DHTML games and applications though. For details on this I gladly refer to ha.ckers.org.

About the author: Ernst-Jan is blogger and co-organizer of BLOG08, who previously worked in New York to cover news at the United Nations. Next to writing, he's also a singer in the band Christina Five. Follow him on Twitter or read his personal blog Dutchproblogger.com .

2 comments to “Like online games? Beware of ClickJacking”

  1. By Wouter on Oct 8, 2008

    More info and a status overview of what is and isn’t fixed can be found here: http://ha.ckers.org/blog/20081.....g-details/

    Reply

  2. By Free Games on Oct 10, 2008

    We have launched a game website like your but this is free of cost.Play and enjoy!

    Reply

Post a Comment


Add your button here too.
Only €99 a week (100.000+ pageviews = less than € 1 CPM!)
Upload your button now.




Copyright 2006-2009 © TheNextWeb.com - Entries (RSS) / Comments (RSS)