click-jacking - how many times must you be warned?

[Guest MEB]

Well, yet another aspect of what I have presented in this forum has now

been addressed. More of the malicious activity we find spreading across the

Internet.

 

Click-jacking

 

http://blogs.zdnet.com/security/?p=1972&tag=nl.e539

From the article:

QUOTE:

With this exploit, once you're on the malicious web page, the bad guy can

make you click on any link, any button, or anything on the page without you

even seeing it happening.

[ SEE: Adobe Flash ads launching clipboard hijack attack ]

If that's not scary enough, consider than the average end user would have no

idea what's going on during a Clickjack attack.

END QUOTE

 

This is a cross-browser exploit NOT OS specific ... make an effort to try

to understand WHY it works, HOW it works, then think carefully about your

Internet usage AND why firewalls and YOUR PERSONAL SETTINGS AND USAGE might

be able to help.

 

Might also want to think about the other exploits out there you HAVEN'T yet

been informed of or have made the "news" [embedded code in video, music, and

other nifty stuff.....like using port 443 to inject things you wouldn't

normally allow or which would have been blocked otherwise...].

 

--

MEB

http://peoplescounsel.org

a Peoples' counsel

_ _

~~

[Guest Dan]

RE: click-jacking - how many times must you be warned?

 

Thanks, MEB. I say about this on the US-CERT Website. I have since removed

Adobe Flash Player in Windows 98 Second Edition and I certainly actually

prefer not having it because many of the annoying ads use flash player and

now cannot run without flash player. I certainly like Windows 98 Second

Edition while running programs that are still supported by 3rd party because

it has yet to fail me. The only failures I have come across with Windows 98

Second Edition recently have to do with Internet Explorer and those were

Denial of Service Errors and one recent freezing of the machine. Thankfully,

I have seen no Blue Screens of Death with Windows 98 Second Edition for a

while now. In Windows XP Professional, my Ipod Mini 6 gigabytes choked when

I connected it to the machine and slowed everything to a crawl. I tried

exiting out of stuff and some stuff would not close and then tried shutting

down and experienced a freeze in XP Professional which required my to hit the

reset button on my computer. The computer loaded Windows XP Professional

fine and then synched the Ipod Mini with Itunes like there had not been any

problem at all. I have not had any problems since with that issue. I have

gotten back my Toshiba notebook computer with the oem version of Windows

Vista Home Premium with all new loaded crap-ware but have not used it much

and now must decide if I want to buy a retail version of Windows Vista Home

Premium or Windows Vista Business or Windows Ultimate or if I should just

format the computer and put either Windows XP Professional or Ubuntu Linux on

it. Do you have any suggestions about which would be best and why. BTW, I

agree that click-jacking is a big problem and people need to be careful and

nowadays you need to be even careful about moving your mouse over certain

areas of web sites too.

 

"MEB" wrote:

>

> Well, yet another aspect of what I have presented in this forum has now

> been addressed. More of the malicious activity we find spreading across the

> Internet.

>

> Click-jacking

>

> http://blogs.zdnet.com/security/?p=1972&tag=nl.e539

> From the article:

> QUOTE:

> With this exploit, once you're on the malicious web page, the bad guy can

> make you click on any link, any button, or anything on the page without you

> even seeing it happening.

> [ SEE: Adobe Flash ads launching clipboard hijack attack ]

> If that's not scary enough, consider than the average end user would have no

> idea what's going on during a Clickjack attack.

> END QUOTE

>

> This is a cross-browser exploit NOT OS specific ... make an effort to try

> to understand WHY it works, HOW it works, then think carefully about your

> Internet usage AND why firewalls and YOUR PERSONAL SETTINGS AND USAGE might

> be able to help.

>

> Might also want to think about the other exploits out there you HAVEN'T yet

> been informed of or have made the "news" [embedded code in video, music, and

> other nifty stuff.....like using port 443 to inject things you wouldn't

> normally allow or which would have been blocked otherwise...].

>

> --

> MEB

> http://peoplescounsel.org

> a Peoples' counsel

> _ _

> ~~

>

>

>

[Guest MEB]

Re: click-jacking - how many times must you be warned?

 

About the only thing I can say related to what OS,,

Microsoft extended the VISTA to XP roll-back for another six months, so it

might be advisable to think about it carefully. Not that it extends support

though.

 

And related to Linux,,, unless you understand that Linux is NOT Windows,

and will take some getting used to, you will likely not like it. It is more

secure, but DOES require you make an effort to understand the OS. You

actually have to use your mental abilities and spend some time learning it,

something Windows users of today aren't to familiar with.

 

 

--

MEB

http://peoplescounsel.org

a Peoples' counsel

_ _

~~

"Dan" <Dan@discussions.microsoft.com> wrote in message

news:5EC7AECA-22C7-4432-9FE3-35769AEA46D8@microsoft.com...

| Thanks, MEB. I say about this on the US-CERT Website. I have since

removed

| Adobe Flash Player in Windows 98 Second Edition and I certainly actually

| prefer not having it because many of the annoying ads use flash player and

| now cannot run without flash player. I certainly like Windows 98 Second

| Edition while running programs that are still supported by 3rd party

because

| it has yet to fail me. The only failures I have come across with Windows

98

| Second Edition recently have to do with Internet Explorer and those were

| Denial of Service Errors and one recent freezing of the machine.

Thankfully,

| I have seen no Blue Screens of Death with Windows 98 Second Edition for a

| while now. In Windows XP Professional, my Ipod Mini 6 gigabytes choked

when

| I connected it to the machine and slowed everything to a crawl. I tried

| exiting out of stuff and some stuff would not close and then tried

shutting

| down and experienced a freeze in XP Professional which required my to hit

the

| reset button on my computer. The computer loaded Windows XP Professional

| fine and then synched the Ipod Mini with Itunes like there had not been

any

| problem at all. I have not had any problems since with that issue. I

have

| gotten back my Toshiba notebook computer with the oem version of Windows

| Vista Home Premium with all new loaded crap-ware but have not used it much

| and now must decide if I want to buy a retail version of Windows Vista

Home

| Premium or Windows Vista Business or Windows Ultimate or if I should just

| format the computer and put either Windows XP Professional or Ubuntu Linux

on

| it. Do you have any suggestions about which would be best and why. BTW,

I

| agree that click-jacking is a big problem and people need to be careful

and

| nowadays you need to be even careful about moving your mouse over certain

| areas of web sites too.

|

| "MEB" wrote:

|

| >

| > Well, yet another aspect of what I have presented in this forum has now

| > been addressed. More of the malicious activity we find spreading across

the

| > Internet.

| >

| > Click-jacking

| >

| > http://blogs.zdnet.com/security/?p=1972&tag=nl.e539

| > From the article:

| > QUOTE:

| > With this exploit, once you're on the malicious web page, the bad guy

can

| > make you click on any link, any button, or anything on the page without

you

| > even seeing it happening.

| > [ SEE: Adobe Flash ads launching clipboard hijack attack ]

| > If that's not scary enough, consider than the average end user would

have no

| > idea what's going on during a Clickjack attack.

| > END QUOTE

| >

| > This is a cross-browser exploit NOT OS specific ... make an effort to

try

| > to understand WHY it works, HOW it works, then think carefully about

your

| > Internet usage AND why firewalls and YOUR PERSONAL SETTINGS AND USAGE

might

| > be able to help.

| >

| > Might also want to think about the other exploits out there you HAVEN'T

yet

| > been informed of or have made the "news" [embedded code in video, music,

and

| > other nifty stuff.....like using port 443 to inject things you wouldn't

| > normally allow or which would have been blocked otherwise...].

| >

| > --

| > MEB

| > http://peoplescounsel.org

| > a Peoples' counsel

| > _ _

| > ~~

| >

| >

| >

[Guest Dan]

Re: click-jacking - how many times must you be warned?

 

Thanks for your feedback, MEB. I would be Windows 98 Second Edition on it

but I know it cannot be fully supported due to such technologies as

PCI-Express not being supported in 98 Second Edition. I am still tempted to

buy an older laptop perhaps from Ebay and put Windows 98 Second Edition on it

especially because of the September 2007 incident when XP Professional failed

and allowed access from VPN connection to APS network and 98 Second Edition

just crashed the application with a denial of service error but fortunately

did not allow access. This raised my confidence in Windows 98 Second Edition

greatly.

 

"MEB" wrote:

> About the only thing I can say related to what OS,,

> Microsoft extended the VISTA to XP roll-back for another six months, so it

> might be advisable to think about it carefully. Not that it extends support

> though.

>

> And related to Linux,,, unless you understand that Linux is NOT Windows,

> and will take some getting used to, you will likely not like it. It is more

> secure, but DOES require you make an effort to understand the OS. You

> actually have to use your mental abilities and spend some time learning it,

> something Windows users of today aren't to familiar with.

>

>

> --

> MEB

> http://peoplescounsel.org

> a Peoples' counsel

> _ _

> ~~

> "Dan" <Dan@discussions.microsoft.com> wrote in message

> news:5EC7AECA-22C7-4432-9FE3-35769AEA46D8@microsoft.com...

> | Thanks, MEB. I say about this on the US-CERT Website. I have since

> removed

> | Adobe Flash Player in Windows 98 Second Edition and I certainly actually

> | prefer not having it because many of the annoying ads use flash player and

> | now cannot run without flash player. I certainly like Windows 98 Second

> | Edition while running programs that are still supported by 3rd party

> because

> | it has yet to fail me. The only failures I have come across with Windows

> 98

> | Second Edition recently have to do with Internet Explorer and those were

> | Denial of Service Errors and one recent freezing of the machine.

> Thankfully,

> | I have seen no Blue Screens of Death with Windows 98 Second Edition for a

> | while now. In Windows XP Professional, my Ipod Mini 6 gigabytes choked

> when

> | I connected it to the machine and slowed everything to a crawl. I tried

> | exiting out of stuff and some stuff would not close and then tried

> shutting

> | down and experienced a freeze in XP Professional which required my to hit

> the

> | reset button on my computer. The computer loaded Windows XP Professional

> | fine and then synched the Ipod Mini with Itunes like there had not been

> any

> | problem at all. I have not had any problems since with that issue. I

> have

> | gotten back my Toshiba notebook computer with the oem version of Windows

> | Vista Home Premium with all new loaded crap-ware but have not used it much

> | and now must decide if I want to buy a retail version of Windows Vista

> Home

> | Premium or Windows Vista Business or Windows Ultimate or if I should just

> | format the computer and put either Windows XP Professional or Ubuntu Linux

> on

> | it. Do you have any suggestions about which would be best and why. BTW,

> I

> | agree that click-jacking is a big problem and people need to be careful

> and

> | nowadays you need to be even careful about moving your mouse over certain

> | areas of web sites too.

> |

> | "MEB" wrote:

> |

> | >

> | > Well, yet another aspect of what I have presented in this forum has now

> | > been addressed. More of the malicious activity we find spreading across

> the

> | > Internet.

> | >

> | > Click-jacking

> | >

> | > http://blogs.zdnet.com/security/?p=1972&tag=nl.e539

> | > From the article:

> | > QUOTE:

> | > With this exploit, once you're on the malicious web page, the bad guy

> can

> | > make you click on any link, any button, or anything on the page without

> you

> | > even seeing it happening.

> | > [ SEE: Adobe Flash ads launching clipboard hijack attack ]

> | > If that's not scary enough, consider than the average end user would

> have no

> | > idea what's going on during a Clickjack attack.

> | > END QUOTE

> | >

> | > This is a cross-browser exploit NOT OS specific ... make an effort to

> try

> | > to understand WHY it works, HOW it works, then think carefully about

> your

> | > Internet usage AND why firewalls and YOUR PERSONAL SETTINGS AND USAGE

> might

> | > be able to help.

> | >

> | > Might also want to think about the other exploits out there you HAVEN'T

> yet

> | > been informed of or have made the "news" [embedded code in video, music,

> and

> | > other nifty stuff.....like using port 443 to inject things you wouldn't

> | > normally allow or which would have been blocked otherwise...].

> | >

> | > --

> | > MEB

> | > http://peoplescounsel.org

> | > a Peoples' counsel

> | > _ _

> | > ~~

> | >

> | >

> | >

>

>

>

[Guest FromTheRafters]

Re: click-jacking - how many times must you be warned?

 

If they had had a Windows for Workgroups computer also,

and it wasn't affected at all, would you say it was even safer

than Win98SE?

 

You draw the strangest conclusions from that experience you

endlessly expound upon.

 

I suggest WinXP for your laptop - You wouldn't be able to

figure out how to use Vista without crippling the security, and

it is easier to to cripple XP than it is to cripple Vista.

 

"Dan" <Dan@discussions.microsoft.com> wrote in message

news:A41F6638-289F-48FA-851D-090E9EBA9CA0@microsoft.com...

> Thanks for your feedback, MEB. I would be Windows 98 Second Edition on it

> but I know it cannot be fully supported due to such technologies as

> PCI-Express not being supported in 98 Second Edition. I am still tempted

> to

> buy an older laptop perhaps from Ebay and put Windows 98 Second Edition on

> it

> especially because of the September 2007 incident when XP Professional

> failed

> and allowed access from VPN connection to APS network and 98 Second

> Edition

> just crashed the application with a denial of service error but

> fortunately

> did not allow access. This raised my confidence in Windows 98 Second

> Edition

> greatly.

>

> "MEB" wrote:

>

>> About the only thing I can say related to what OS,,

>> Microsoft extended the VISTA to XP roll-back for another six months, so

>> it

>> might be advisable to think about it carefully. Not that it extends

>> support

>> though.

>>

>> And related to Linux,,, unless you understand that Linux is NOT Windows,

>> and will take some getting used to, you will likely not like it. It is

>> more

>> secure, but DOES require you make an effort to understand the OS. You

>> actually have to use your mental abilities and spend some time learning

>> it,

>> something Windows users of today aren't to familiar with.

>>

>>

>> --

>> MEB

>> http://peoplescounsel.org

>> a Peoples' counsel

>> _ _

>> ~~

>> "Dan" <Dan@discussions.microsoft.com> wrote in message

>> news:5EC7AECA-22C7-4432-9FE3-35769AEA46D8@microsoft.com...

>> | Thanks, MEB. I say about this on the US-CERT Website. I have since

>> removed

>> | Adobe Flash Player in Windows 98 Second Edition and I certainly

>> actually

>> | prefer not having it because many of the annoying ads use flash player

>> and

>> | now cannot run without flash player. I certainly like Windows 98

>> Second

>> | Edition while running programs that are still supported by 3rd party

>> because

>> | it has yet to fail me. The only failures I have come across with

>> Windows

>> 98

>> | Second Edition recently have to do with Internet Explorer and those

>> were

>> | Denial of Service Errors and one recent freezing of the machine.

>> Thankfully,

>> | I have seen no Blue Screens of Death with Windows 98 Second Edition for

>> a

>> | while now. In Windows XP Professional, my Ipod Mini 6 gigabytes choked

>> when

>> | I connected it to the machine and slowed everything to a crawl. I

>> tried

>> | exiting out of stuff and some stuff would not close and then tried

>> shutting

>> | down and experienced a freeze in XP Professional which required my to

>> hit

>> the

>> | reset button on my computer. The computer loaded Windows XP

>> Professional

>> | fine and then synched the Ipod Mini with Itunes like there had not been

>> any

>> | problem at all. I have not had any problems since with that issue. I

>> have

>> | gotten back my Toshiba notebook computer with the oem version of

>> Windows

>> | Vista Home Premium with all new loaded crap-ware but have not used it

>> much

>> | and now must decide if I want to buy a retail version of Windows Vista

>> Home

>> | Premium or Windows Vista Business or Windows Ultimate or if I should

>> just

>> | format the computer and put either Windows XP Professional or Ubuntu

>> Linux

>> on

>> | it. Do you have any suggestions about which would be best and why.

>> BTW,

>> I

>> | agree that click-jacking is a big problem and people need to be careful

>> and

>> | nowadays you need to be even careful about moving your mouse over

>> certain

>> | areas of web sites too.

>> |

>> | "MEB" wrote:

>> |

>> | >

>> | > Well, yet another aspect of what I have presented in this forum has

>> now

>> | > been addressed. More of the malicious activity we find spreading

>> across

>> the

>> | > Internet.

>> | >

>> | > Click-jacking

>> | >

>> | > http://blogs.zdnet.com/security/?p=1972&tag=nl.e539

>> | > From the article:

>> | > QUOTE:

>> | > With this exploit, once you're on the malicious web page, the bad guy

>> can

>> | > make you click on any link, any button, or anything on the page

>> without

>> you

>> | > even seeing it happening.

>> | > [ SEE: Adobe Flash ads launching clipboard hijack attack ]

>> | > If that's not scary enough, consider than the average end user would

>> have no

>> | > idea what's going on during a Clickjack attack.

>> | > END QUOTE

>> | >

>> | > This is a cross-browser exploit NOT OS specific ... make an effort

>> to

>> try

>> | > to understand WHY it works, HOW it works, then think carefully about

>> your

>> | > Internet usage AND why firewalls and YOUR PERSONAL SETTINGS AND USAGE

>> might

>> | > be able to help.

>> | >

>> | > Might also want to think about the other exploits out there you

>> HAVEN'T

>> yet

>> | > been informed of or have made the "news" [embedded code in video,

>> music,

>> and

>> | > other nifty stuff.....like using port 443 to inject things you

>> wouldn't

>> | > normally allow or which would have been blocked otherwise...].

>> | >

>> | > --

>> | > MEB

>> | > http://peoplescounsel.org

>> | > a Peoples' counsel

>> | > _ _

>> | > ~~

>> | >

>> | >

>> | >

>>

>>

>>

[Guest Dan]

Re: click-jacking - how many times must you be warned?

 

Thanks for your suggestion anyway but I will go with a retail copy of Vista

or go with Ubuntu Linux on my laptop. Remember, the more services provided

the easier it is to hack into operating systems and a big problem with XP

Professional is the remote access which can be hacked into. Please see the

following websites for more information:

 

http://cquirke.mvps.org/9x/riskfix.htm

 

http://en.wikipedia.org/wiki/Remote_procedure_call

 

http://cquirke.spaces.live.com/blog/cns!C7DAB1E724AB8C23!336.entry

 

http://support.microsoft.com/gp/msim_win98

 

https://www.blogger.com/comment.g?blogID=11573761&postID=8512976766347681682

 

http://secunia.com/advisories/product/22/

 

 

Vendor, Links, and Unpatched Vulnerabilities

 

Vendor Microsoft

 

Product Link N/A

 

Affected By 220 Secunia advisories

203 Vulnerabilities

 

Monitor Product Receive alerts for this product

 

Unpatched 14% (31 of 220 Secunia advisories)

 

Most Critical Unpatched

The most severe unpatched Secunia advisory affecting Microsoft Windows XP

Professional, with all vendor patches applied, is rated Moderately critical .

 

http://secunia.com/advisories/product/13/

 

Vendor, Links, and Unpatched Vulnerabilities

 

Vendor Microsoft

 

Product Link N/A

 

Affected By 32 Secunia advisories

21 Vulnerabilities

 

Monitor Product Receive alerts for this product

 

Unpatched 9% (3 of 32 Secunia advisories)

 

Most Critical Unpatched

The most severe unpatched Secunia advisory affecting Microsoft Windows 98

Second Edition, with all vendor patches applied, is rated Less critical .

 

Okay, now 3 unpatched vulnerabilities in Windows 98 Second Edition compared

to 31 unpatched vulnerabilities in Windows XP Professional is a no brainer

and 98 SE having only less critical compared to moderately critical

vulnerabilities in XP Professional.

 

Note, I still would make sure to use Windows 98 Second Edition in a safe

manner meaning that the user runs supported browsers like Mozilla Firefox 2.x

for now and/or Opera and/or another browser and not use Internet Explorer

ever once Windows Update is fully up to date.

 

2. This includes not using unsupported editions of Windows Media Player 9

when connected to the Internet in 98 Second Edition as well as other

unsupported software

 

3. I am using Office XP Professional in 98 Second Edition and I just

manually update it with the latest updates since the automation tool is for

Windows 2000 and above and this is fine because I like doing things manually

anyway.

 

4. Finally, practice safe browsing, block third party cookies, read in

plain text by default, remove Flash player which is annoying the majority of

time anyway because of all the advertisements and do not install Windows

Scripting Host because you do not want to have scripts written for you

automatically.

 

I think it is clear that the future lies in open and closed source

technologies working together in harmony.

 

"FromTheRafters" wrote:

> If they had had a Windows for Workgroups computer also,

> and it wasn't affected at all, would you say it was even safer

> than Win98SE?

>

> You draw the strangest conclusions from that experience you

> endlessly expound upon.

>

> I suggest WinXP for your laptop - You wouldn't be able to

> figure out how to use Vista without crippling the security, and

> it is easier to to cripple XP than it is to cripple Vista.

>

> "Dan" <Dan@discussions.microsoft.com> wrote in message

> news:A41F6638-289F-48FA-851D-090E9EBA9CA0@microsoft.com...

> > Thanks for your feedback, MEB. I would be Windows 98 Second Edition on it

> > but I know it cannot be fully supported due to such technologies as

> > PCI-Express not being supported in 98 Second Edition. I am still tempted

> > to

> > buy an older laptop perhaps from Ebay and put Windows 98 Second Edition on

> > it

> > especially because of the September 2007 incident when XP Professional

> > failed

> > and allowed access from VPN connection to APS network and 98 Second

> > Edition

> > just crashed the application with a denial of service error but

> > fortunately

> > did not allow access. This raised my confidence in Windows 98 Second

> > Edition

> > greatly.

> >

> > "MEB" wrote:

> >

> >> About the only thing I can say related to what OS,,

> >> Microsoft extended the VISTA to XP roll-back for another six months, so

> >> it

> >> might be advisable to think about it carefully. Not that it extends

> >> support

> >> though.

> >>

> >> And related to Linux,,, unless you understand that Linux is NOT Windows,

> >> and will take some getting used to, you will likely not like it. It is

> >> more

> >> secure, but DOES require you make an effort to understand the OS. You

> >> actually have to use your mental abilities and spend some time learning

> >> it,

> >> something Windows users of today aren't to familiar with.

> >>

> >>

> >> --

> >> MEB

> >> http://peoplescounsel.org

> >> a Peoples' counsel

> >> _ _

> >> ~~

> >> "Dan" <Dan@discussions.microsoft.com> wrote in message

> >> news:5EC7AECA-22C7-4432-9FE3-35769AEA46D8@microsoft.com...

> >> | Thanks, MEB. I say about this on the US-CERT Website. I have since

> >> removed

> >> | Adobe Flash Player in Windows 98 Second Edition and I certainly

> >> actually

> >> | prefer not having it because many of the annoying ads use flash player

> >> and

> >> | now cannot run without flash player. I certainly like Windows 98

> >> Second

> >> | Edition while running programs that are still supported by 3rd party

> >> because

> >> | it has yet to fail me. The only failures I have come across with

> >> Windows

> >> 98

> >> | Second Edition recently have to do with Internet Explorer and those

> >> were

> >> | Denial of Service Errors and one recent freezing of the machine.

> >> Thankfully,

> >> | I have seen no Blue Screens of Death with Windows 98 Second Edition for

> >> a

> >> | while now. In Windows XP Professional, my Ipod Mini 6 gigabytes choked

> >> when

> >> | I connected it to the machine and slowed everything to a crawl. I

> >> tried

> >> | exiting out of stuff and some stuff would not close and then tried

> >> shutting

> >> | down and experienced a freeze in XP Professional which required my to

> >> hit

> >> the

> >> | reset button on my computer. The computer loaded Windows XP

> >> Professional

> >> | fine and then synched the Ipod Mini with Itunes like there had not been

> >> any

> >> | problem at all. I have not had any problems since with that issue. I

> >> have

> >> | gotten back my Toshiba notebook computer with the oem version of

> >> Windows

> >> | Vista Home Premium with all new loaded crap-ware but have not used it

> >> much

> >> | and now must decide if I want to buy a retail version of Windows Vista

> >> Home

> >> | Premium or Windows Vista Business or Windows Ultimate or if I should

> >> just

> >> | format the computer and put either Windows XP Professional or Ubuntu

> >> Linux

> >> on

> >> | it. Do you have any suggestions about which would be best and why.

> >> BTW,

> >> I

> >> | agree that click-jacking is a big problem and people need to be careful

> >> and

> >> | nowadays you need to be even careful about moving your mouse over

> >> certain

> >> | areas of web sites too.

> >> |

> >> | "MEB" wrote:

> >> |

> >> | >

> >> | > Well, yet another aspect of what I have presented in this forum has

> >> now

> >> | > been addressed. More of the malicious activity we find spreading

> >> across

> >> the

> >> | > Internet.

> >> | >

> >> | > Click-jacking

> >> | >

> >> | > http://blogs.zdnet.com/security/?p=1972&tag=nl.e539

> >> | > From the article:

> >> | > QUOTE:

> >> | > With this exploit, once you're on the malicious web page, the bad guy

> >> can

> >> | > make you click on any link, any button, or anything on the page

> >> without

> >> you

> >> | > even seeing it happening.

> >> | > [ SEE: Adobe Flash ads launching clipboard hijack attack ]

> >> | > If that's not scary enough, consider than the average end user would

> >> have no

> >> | > idea what's going on during a Clickjack attack.

> >> | > END QUOTE

> >> | >

> >> | > This is a cross-browser exploit NOT OS specific ... make an effort

> >> to

> >> try

> >> | > to understand WHY it works, HOW it works, then think carefully about

> >> your

> >> | > Internet usage AND why firewalls and YOUR PERSONAL SETTINGS AND USAGE

> >> might

> >> | > be able to help.

> >> | >

> >> | > Might also want to think about the other exploits out there you

> >> HAVEN'T

> >> yet

> >> | > been informed of or have made the "news" [embedded code in video,

> >> music,

> >> and

> >> | > other nifty stuff.....like using port 443 to inject things you

> >> wouldn't

> >> | > normally allow or which would have been blocked otherwise...].

> >> | >

> >> | > --

> >> | > MEB

> >> | > http://peoplescounsel.org

> >> | > a Peoples' counsel

> >> | > _ _

> >> | > ~~

> >> | >

> >> | >

> >> | >

> >>

> >>

> >>

>

>

>

[Guest FromTheRafters]

Re: click-jacking - how many times must you be warned?

 

Oh well....I tried.

 

[snipped verbiage]

[Guest thanatoid]

Re: click-jacking - how many times must you be warned?

 

"FromTheRafters" <erratic@nomail.afraid.org> wrote in

news:er9P7qlKJHA.5992@TK2MSFTNGP05.phx.gbl:

> Oh well....I tried.

>

> [snipped verbiage]

 

Allow me...

 

WHY do you go to "questionable sites" in the first place?

 

 

--

Those who cast the votes decide nothing. Those who count the

votes decide everything.

- Josef Stalin

[Guest Dan]

Re: click-jacking - how many times must you be warned?

 

I wanted to let you know that XP Professional totally failed on me today and

would not even boot up. The downgrade from IE 7 to IE 6 with Microsoft's

help totally destroyed XP Professional so now I am getting ready to do a

clean install and I plan to just stay with IE 6 for XP Professional until IE

8 is ready to go and out of beta. I switched to IE 8 beta 2 after IE 6 would

not load and it worked for a while but now the whole XP Pro. operating system

is just giving up because the ATI driver had issues the other day and I-tunes

had issues when connecting my Ipod so apparently it is too much for XP Pro.

to handle. This is yet another reason XP Professional is over-rated and if

people actually had skills and used 98 Second Edition with the help of 3rd

party software and their own custom built computers then I think that many

would be pleasantly surprised. I can only hope that Microsoft will consider

having another true consumer operating system again someday and if it is an

all in one solution then Microsoft at least has a true maintenance operating

system like MS-DOS underneath the hood so that at least software experts can

more easily fix the problems within a true maintenance operating system.

Heck, I am so old school that I enjoyed the days when everything was in

memory and would start anew each time the computer was turned on like in the

IBM PCjr. The problem nowadays is there is so much complexity and so much in

the registry and the operating system so large that lots of software is not

written as well as it used to be because there is so much space that software

writers do not have the need to keep it small and light and within small hard

drive spaces. Heck, in the stores you now see one terabyte drives for sale.

 

"thanatoid" wrote:

> "FromTheRafters" <erratic@nomail.afraid.org> wrote in

> news:er9P7qlKJHA.5992@TK2MSFTNGP05.phx.gbl:

>

> > Oh well....I tried.

> >

> > [snipped verbiage]

>

> Allow me...

>

> WHY do you go to "questionable sites" in the first place?

>

>

> --

> Those who cast the votes decide nothing. Those who count the

> votes decide everything.

> - Josef Stalin

>