Is Clickjacking a Serious Threat?
Technical news mags such as ZDnet report that clickjacking may be a serious threat that affects any Internet browser.
Clickjacking from the Layperson’s Perspective
In laymen’s terms, clickjacking happens when a malicious page is hiding behind what appears to be a safe webpage. When you click an item on the supposedly safe page, your computer is clickjacked by malicious code which then hijacks your pc’s accessories or other components. This occurs without your knowledge.
Typically, clickjacking will affect webcams, but it can also hijack other areas of your computer. For instance, your microphone or sound system can be exploited, or your computer can be taken over in other ways.
Adobe’s Flash Player was especially vulnerable to clickjacking, but Adobe has come out with a fix to address the issue.
What Browsers are Affected?
Clickjacking is a malicious code that affects virtually all Internet browsers. There is no quick fix, such as disabling javascript.
The only known solution is a “No Script” add-on that works with Firefox.
Problems with the Clickjacking Fix
After using No Script for a week or so, I disabled it because it made web surfing a chore. Virtually every site I visited was blocked to some degree or another because the site had ads, YouTube videos or javascript coding. For instance, the following were all blocked by No Script:
- Google Analytics
- Pepperjam network
- Peelaway Ads
- Voxant’s newsroom
- Chitika
- and many, many more (see the partial list of affiliate programs and other utilities blocked by No Script).
Google’s Adsense is one of the few advertising networks that are automatically whitelisted by the No Script add-on. Most of the others will need to be manually approved, and it is unlikely that the average Internet user will know that an ad is safe enough to whitelist.
If clickjacking is as bad of a problem as some say it is and if No Script and similar “script blocking” solutions are the only ways to fight back, then online advertising could take a major hit. Adserver Plus and other heavy hitting advertising networks were blocked by the Firefox add-on.
Conclusion: Maybe the Threat is Overrated
My web browsing experience is back up to speed since I’ve disabled No Script and so far I haven’t been hit by any type of clickjacking activities. Perhaps the threat is not as serious as some would claim.
The NotGuru blog has posted some videos that show exactly how clickjacking works and how to install fixes.
Enable Chrome Side Tabs
|
|
Cuisinart ICE-30BC Pure Indulgence 2-Quart Automatic Frozen Yogurt, Sorbet, and Ice Cream Maker $66.38 … |
|
|
Cuisinart CSB-77 Smart Stick Hand Blender with Whisk and Chopper Attachments $46.99 Grab this amazingly versatile kitchen tool and the power to mix, whisk and chop will be in the palm of your hand. Housed in handsome brushed stainless steel, this compact hand blender features a powerful 200-watt motor and three separate attachments that quickly and easily create smooth soups, whipped creams, purees and much more. Simple one-handed operation with push-button control and an ergonom… |
|
|
Back to Basics TEM500 Egg-and-Muffin 2-Slice Toaster and Egg Poacher $52.99 *Multi-function toaster and egg cooker combination *Can be used as a traditional toaster, egg poacher or together to create the ultimate breakfast sandwich *2 slice bread, muffin or bagel *Variable toasting *Automatic pop-up mechanism *Cool touch sides *Automatic shut-off for toaster and egg poacher *Indicator light illuminates when appliance is on *Delivers a convenient breakfast sandwich in appr… |
|
|
Bob Dylan: 1978-1989 – Both Ends of the Rainbow $8.73 Studio: Music Video Dist Release Date: 06/10/2008… |
|
|
Chrome $4.95 … |
|
|
When I See Light [CASSETTE SINGLE] CASSETTE SINGLE… |
|
|
Wahl Color Pro 20 Piece Hair Clipper $40.99 Multi-cut clipper with adjustable taper control. Color key on clipper and guide combs. Features Power Drive Technology for precision and speed…. |
|
|
Wahl 79524-1001 Deluxe Chrome Pro with Multi-Cut Clipper & Trimmer, 27 Pieces $34.99 Cordless mini-clipper. Multi-cut clipper. Super easy step-by-step full color instructions. Self-sharpening, high-carbon steel blades stay sharp longer. Soft storage zipper case. 27 pieces. Includes: soft storage case. 35% more power. PowerDrive cutting system. Easily cuts the thickest hair with 35% more power. The brand used by professionals. Pro quality haircut kit. Includes: multi-cut clipper; b… |
|
|
Jerdon JP2027N 8-Inch Wall Mount Mirror, 7X Magnification Nickel Finish $32.39 JP2027N – 8″ 7X-1X NICKEL.EXTENDS 24″ – 7X to 1X magnification 8″ diameter mirror Matte nickel finish Extends 20″ from the wall Mounting hardware included … |
|
|
Biker T-Shirt Chrome Skull Side Imprint This listing is for a 6.1 oz heavyweight 100% preshrunk cotton t-shirt. Please choose your Size and/or Color from the drop down menu above if applicable…. |
|
|
Nadine White/Chrome Side Chairs (Set of 2) $160.98 Materials: Lacquered stained laminate/chromeFinish: White/chromeDecorative cutouts |
|
|
Nadine Wenge Brown/Chrome Side Chairs (Set of 2) $180.99 Materials: Lacquered stained laminate/chromeFinish: Wenge brown/chromeDecorative cutouts |
|
|
Black Snap-on Case with Removable Leather Cover for Apple iPhone 4/ 4S $8.99 This is a black with chrome sides snap-on case with removable leather cover for Apple iPhone 4/ 4S. Keep your cell phone safe and protected against external dust and scratches in this snap-on case accessory. |
|
|
Brown Snap-on Case with Removable Leather Cover for Apple iPhone 4/ 4S $8.99 This is a brown with chrome sides snap-on case with removable leather cover for Apple iPhone 4/ 4S. Keep your cell phone safe and protected against external dust and scratches in this snap-on case accessory. |
|
|
Frameless Vista Wall Mirror $102.99 Frameless Vista Mirror includes stylish, beveled edgesDecorative accessory highlighted by an arched top and chrome side accentsDurable looking glass constructed in 0.19-inch thick glass plus metal |
