Alarm Raised For "Clickjacking" Browser Exploit 308
Shipment Date writes "ZDNet's Zero Day blog has some new information on what looks like a scary new browser exploit/threat affecting all the major desktop platforms — Microsoft Internet Explorer, Mozilla Firefox, Apple Safari, Opera and Adobe Flash. The threat, called Clickjacking, was to be discussed at the OWASP conference but was nixed at the last minute at hte request of affected vendors. From the article: 'In a nutshell, it's when you visit a malicious website and the attacker is able to take control of the links that your browser visits. The problem affects all of the different browsers except something like lynx. The issue has nothing to do with JavaScript so turning JavaScript off in your browser will not help you.'"
Hurray for us lynx users! (Score:5, Funny)
*crickets*
Go Lynx! (Score:2, Funny)
The first thing I thought of (Score:4, Funny)
Never gonna... (Score:5, Funny)
Thank Jeebus! (Score:5, Funny)
Re:Information (Score:5, Funny)
It's very similar to the DNS issue from a couple of months back: It's a hugely scary thing that will doom the Internet, but because we're responsible we can't tell you what it is in any detail. However, if you don't patch your browser immediately (patch not yet available), you are fucked.
Have a nice day.
didn't click (Score:4, Funny)
Re:Konqueror? (Score:5, Funny)
The summary clearly states that only lynx is not affected. It's pretty obvious what's going on here: the exploit is a nefarious plot to make everyone switch over to lynx, thereby crippling the non-text-based porn industry.
Re:Konqueror? (Score:5, Funny)
Re:Never gonna... (Score:3, Funny)
With all the horrible things on the Internet, you're worried about rickrolls? Have some priorities.
We're all going to end up seeing goatse.cx again.
zomg Flash is insecure (Score:3, Funny)
Re:Thank Jeebus! (Score:5, Funny)
Finally I have a legitimate excuse for all the pr0n sites that are in my browser history. No honey, it isn't me, it's a browsers exploit! I swear!
I don't know how things work for you, but saying that I just got clickjacked is only going to get me into more trouble, not less.
DETAILS OF THE EXPLOIT! (Score:1, Funny)
The exploit was first discovered at about 7:30 am after blogger Ryan Naraine's boss noted several "odd" adult sites appeared in mister Nariane's browser history.
So far, the exploit seems confined to browsers on Mr. Nariane's desktop, so users of effected browsers are urged to apply all public OS/browser patches and to stay away from Ryan's desktop.
Re:Never gonna... (Score:5, Funny)
We're all going to end up seeing goatse.cx again.
yeah but now it will have Rick Astley playing in the background...
Re:The first thing I thought of (Score:3, Funny)
"The first thing I thought of was some weird mouse-mastubation scenario."
"Mastubation"?? I'm picturing small rodents with catheters....
Even my capybara Lemmiwinks thinks THAT is sick.
Re:Information (Score:5, Funny)
Re:Information (Score:3, Funny)
...I did click it. What a useless article.
It's a fundamental flaw with the way your browser works and cannot be fixed with a simple patch.
Oh no! There's nothing we can do!
In the meantime, the only fix is to disable browser scripting and plugins.
Uh... wha? I thought it didn't have to do with browser scripting and plugins?
So it's big and scary and you can't protect against it, except by taking basic precautions to protect yourself against it. I see.
Re:Information (Score:5, Funny)
Re:Never gonna... (Score:2, Funny)
yeah but now it will have Rick Astley playing in the background...
Do you mean his music or that Rick will be on "giver.jpg" this time?
Re:Bullshit? (Score:1, Funny)
Don't trust that link!
Re:Information (Score:5, Funny)
Re:Information (Score:3, Funny)
Sounds like our economy right about now.
Re:Hurray for us lynx users! (Score:2, Funny)
Yes, if you use lynx, you get textjack'ed instead...
Flashbock? (Score:3, Funny)
Re:Hurray for us lynx users! (Score:5, Funny)
Or Holdingdownholdingdownholdingdowncrapupupupenter-jacked.
Emergency Transfer Of Funds Required (Score:2, Funny)
That's not Lynx! (Score:1, Funny)
That's Google's first browser :-)
http://googlesystem.blogspot.com/2006/03/google-browser.html
Re:Never gonna... (Score:1, Funny)
We're all going to end up seeing goatse.cx again.
So it's just going to redirect me to my homepage?
Re:Konqueror? (Score:1, Funny)
"sticking"
TMI
Re:Information (Score:5, Funny)
Better? :-P
Well, That's better than simply turning on the radio when you needed to eject.
Re:Turn to Lynx? (Score:5, Funny)
I hate to burst you bubble, but it does not mean I'm 12. It means that I'm older than sin [livinginternet.com].
You young'uns these days just don't understand anything that has a black rope coming out the back. It's got to be all "txtm3 or gtfo". 4COL. Well, @TEOTD I have a message for you, young man! GOML* and GAL! --AKAIB
* Get Off My Lawn
Re:Information (Score:1, Funny)
You mean DNC veep Joe Biden in a bikini?