Showing posts with label interface redressing. Show all posts
Showing posts with label interface redressing. Show all posts

You've heard of "clickjacking", now meet "keyjacking"

An Italian security researcher has rediscovered a trick known as user interface redressing.
He's used the concept to detail some potentially risky behaviour in Internet Explorer 8 on Windows 7.

http://nakedsecurity.sophos.com/2013/06/29/anatomy-of-a-browser-trick-youve-heard-of-clickjacking-now-meet-keyjacking/
Keyjacking
You may remember clickjacking, where your cursor is placed over a clickable button, such as a Facebook Like, that is itself placed over an innocent-looking image. Then the button is made transparent, so that the image "re-dresses" the button and you think you are clicking on the image.
Valotta's trick is keyjacking, which is like clickjacking but with the re-dressing done the other way around.

Meet keyjacking | Naked Security