Like online games? Beware of ClickJacking

Written on October 8, 2008 – 11:45 am
Ernst-Jan Pfauth, editor in chief

Most web-based games might appear innocent, but a blogger from GUYA.NET proves that they can function as a way for the web’s bad guys to take over your webcam. When this blogger first heard about this phenomenon clickjacking, he tried to develop a game that could do the same thing. He discovered that the Achilles heel of Flash was the Flash Player Setting Manager. Nice piece of citizen journalism.

By creating some sort of overlay in a Javascript Game, users just think they’re trying to click a button as fast as possible. What they really do, is granting some voyeur access to their web cam. Check it out:

Kudos for Adobe, who fixed this problem by “framebusting the Setting Manager pages“. Supposedly, 99.9% of the users are protected from spies, pervs, or whatnot. The issue still exists for Java, SilverLight, DHTML games and applications though. For details on this I gladly refer to ha.ckers.org.

I hope you like that post!

The Next Web Blog covers start-up news from all over the world (not just the Valley), exciting new technologies and inspiring entrepreneurs. If you're new here, you may want to read our 'About' page and subscribe to our RSS feed.

Do you have a start-up that we should write about? Contact us! Thanks for visiting and hope you come back again!

adobe, adobe flash, Adobe Flash Player, clickjacking, DHTML, Java, javascript, security, Silverlight

About the author: Ernst-Jan is blogger and co-organizer of BLOG08, who previously worked in New York to cover news at the United Nations. Next to writing, he's also a singer in the band Christina Five. Follow him on Twitter or read his personal blog Dutchproblogger.com .

Post that could be related to this post:

The booming online gaming industry

Hey you, yes, you! You are responsible for that huge buzz about online casual games! Since you are playing online games everywhere, whenever and so many times, you were helping in the past years to...

21Ventures seeds Israeli anti-cheating software for online games maker Cognisafe

21Ventures, a U.S. based venture capital firm, announced today an undisclosed seed investment in CogniSafe, an Israeli company providing real-time anti-cheat software solution for online games. Cheating in online games is effectively a problem which causes...

Online games = experience = money! Just ask PlayFish

Hey you know what? I'm just gonna link all today's tech news to Calacanis latest news letter. He wants, needs, and breathes the attention, and he does a great job in getting it. I mean,...

2 comments to “Like online games? Beware of ClickJacking”

By Wouter on Oct 8, 2008

More info and a status overview of what is and isn’t fixed can be found here: http://ha.ckers.org/blog/20081.....g-details/

[Reply]
By Free Games on Oct 10, 2008

We have launched a game website like your but this is free of cost.Play and enjoy!

[Reply]

The Next Web