quarta-feira, 8 de outubro de 2008

Clickjacking

Depois do "carjacking" e do "homejacking", só faltava este...
Clickjacking has been known for several years but is drawing attention again after two security researchers, Robert Hansen and Jeremiah Grossman, warned last month of new scenarios that could compromise a person's privacy or even worse, steal money from a bank account.
(...) Clickjacking can also be accomplished by manipulating the plug-ins of other applications, such as Adobe's Flash program and Microsoft's Silverlight. For example, researchers in recent days have shown it's possible for a clickjacking attack to turn on a person's Web camera and microphone without their knowledge.
Mais info aqui e aqui.

Enfim.