ClickJacking
Webcam ClickJacking
http://www.youtube.com/watch?v=gxyLbpldmuU
OWASP Clickjacking
http://www.youtube.com/watch?v=H9srYh0HMP4
Clickjacking Flash
http://www.youtube.com/watch?v=PEO6ixciIK0
major web attack called clickjacking going around
http://www.youtube.com/watch?v=WSM4JYeuSSY
Hello ClearClick, Goodbye Clickjacking!
Finally NoScript 1.8.2.1 is out, featuring the announced new anti-clickjacking countermeasures enabled by default, independent from IFRAME and plugin content blocking settings.
The most specific and ambitious is called ClearClick: whenever you click or otherwise interact, through your mouse or your keyboard, with an embedded element which is partially obstructed, transparent or otherwise disguised, NoScript prevents the interaction from completing and reveals you the real thing in “clear”. At that point you can evaluate if the click target was actually the intended one, and decide if keeping it locked or unlock it for free interaction. This comes quite handy now that more dangerous usages of clickjacking are being disclosed, such as enabling your microphone or your webcam behind your back to spy you through the interwebs.
As you already know if you read my first clickjacking article, an old and benign clickjacking example is NoScript’s “Install Now” orange button, which overlays the green one on addons.mozilla.org to work-around the installation security warning. If you click it with ClearClick enabled, now you get warned about something sneaky going on.
http://hackademix.net/2008/10/08/hello-clearclick-goodbye-clickjacking/