Portal IT :: News, download, directory


Search: Sunday 27 May 2012











Add to Google Add to My Yahoo!


  Add to Favorites   Set Home Page





« may 2012
s m t w t f s
29 30 1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31 1 2
3 4 5 6 7 8 9







On Twitter, Don't Click Means Do Click
Published on Security  |  February 13, 2009, 14:53

Twitter has been gaining a serious amount of users, thus making a good ground for hackers and malware writers. The first test proved successful.

Twitter users began receiving link coming from accounts they follow, links that were prefaced by the words "Don't click". Needless to say, forbidding on the web is actually using reverse psychology to make the user to whatever you want him to. Don't click naturally turned into “I'll click and you can't stop me!”.

As it follows, hasty clickers were taken to a web site employing technique called clickjacking. Twitter co-founder Biz Stone writes:

"[Clickjacking is]A vulnerability across a variety of browsers and platforms, a clickjacking takes the form of embedded code or script that can execute without the user's knowledge, such as clicking on a button that appears to perform another function."

In Twitters case, this led to an avalanche of new message being sent across the service, messages that came from every user naïve enough to click the link. No actual harm was done, but the mishap prompted Twitter to submit an update which blocks the clickjacking technique.




Rate this       Low   High
Curent Rating: 2.7/5 by 6 users
 Print       Email      IM 




 
More Security News
 
Daily News Alert

 
Advertising
 
Top Rated Security News This Month