Clickjacking?????
Results 1 to 10 of 10

Thread: Clickjacking?????

  1. November 21st, 2009, 01:54 AM #1
    egdufwollamhsram1851
    egdufwollamhsram1851 is offline Virtual PC Specialist!!!
    Join Date
    Nov 2001
    Location
    some where in the great lakes region
    Posts
    2,924

    Unhappy Clickjacking?????

    i was just in photo bucket and got the whiz scared out of me,, what is this now in photobucket, never saw it before, but maybe i did not have "noscript" on before


    http://blogs.zdnet.com/security/?p=1972

    it looks like photo bucket is a mess????????????
    eg
    Reply With Quote Reply With Quote
  2. November 21st, 2009, 02:07 AM #2
    photolady's Avatar
    photolady
    photolady is offline Lifetime Friend of Site Staff
    Join Date
    Mar 2002
    Location
    At my computer, cruising VDR and watching your back
    Posts
    23,412
    Did you notice the date of that article? "September 25th, 2008" I don't think this is a problem anymore. I was just over at my photobucket and found nothing untoward wrong there.
    Reply With Quote Reply With Quote
  3. November 21st, 2009, 01:23 PM #3
    egdufwollamhsram1851
    egdufwollamhsram1851 is offline Virtual PC Specialist!!!
    Join Date
    Nov 2001
    Location
    some where in the great lakes region
    Posts
    2,924

    Question

    Are you running the "no script " add on in fire fox?

    I had never seen this before, maybe if i leave the check mark out of untrusted?

    But when i searched click jacking i guess i did not want to use photo bucket anymore?
    Last edited by egdufwollamhsram1851; November 23rd, 2009 at 10:19 PM.
    Reply With Quote Reply With Quote
  4. November 21st, 2009, 02:03 PM #4
    photolady's Avatar
    photolady
    photolady is offline Lifetime Friend of Site Staff
    Join Date
    Mar 2002
    Location
    At my computer, cruising VDR and watching your back
    Posts
    23,412
    Well, I don't use FireFox, I use Opera. And I don't get that message nor do I have any problems on my computer ever.
    Reply With Quote Reply With Quote
  6. November 21st, 2009, 03:57 PM #5
    egdufwollamhsram1851
    egdufwollamhsram1851 is offline Virtual PC Specialist!!!
    Join Date
    Nov 2001
    Location
    some where in the great lakes region
    Posts
    2,924
    There must be something embedded there, i have not used photobucket since i added "noscript" addon to fire fox.

    so i guess i'm not using photobucket anymore

    first time i ever heard of click jack
    tks
    why is opera better than firefox? never used it,.

    this is the only site i have ever seen this on--photobucket-
    Reply With Quote Reply With Quote
  7. November 21st, 2009, 04:51 PM #6
    photolady's Avatar
    photolady
    photolady is offline Lifetime Friend of Site Staff
    Join Date
    Mar 2002
    Location
    At my computer, cruising VDR and watching your back
    Posts
    23,412
    I guess the reason you're seeing that is because you're blocking flash. From researching that add-on is what I thought that add-on is for.

    I never liked Firefox especially after removing a skin I downloaded and FF promptly removed all the photos I just painstakingly scanned in hours before.

    I like Opera because it's simple to set up and works fine, even at Microsoft websites.

    Also I have not use photobucket as much lately because they downsize my photos, so I use www.flickr.com now
    Reply With Quote Reply With Quote
  8. November 21st, 2009, 06:57 PM #7
    egdufwollamhsram1851
    egdufwollamhsram1851 is offline Virtual PC Specialist!!!
    Join Date
    Nov 2001
    Location
    some where in the great lakes region
    Posts
    2,924

    Question

    If i allow scripts on that page the same thing happens, all to my knowledge after i have been using "noscripts", if you right click on the page "noscripts" has sebveral options//sel;ect allow this page// same message comes up. never did that before, i can not upload anything there now, not that i need to., was just going to try it.
    Reply With Quote Reply With Quote
  9. November 21st, 2009, 09:18 PM #8
    egdufwollamhsram1851
    egdufwollamhsram1851 is offline Virtual PC Specialist!!!
    Join Date
    Nov 2001
    Location
    some where in the great lakes region
    Posts
    2,924

    Thumbs up

    here's what you have to do



    The culprit is the new "Click here to start uploading" balloon overlaying the Flash "Upload" button.
    As a work around by opening about:config and adding *.photobucket.com (space separated) to the noscript.clearClick.exceptions preference.

    from forums on noscript
    Reply With Quote Reply With Quote
  11. November 21st, 2009, 09:38 PM #9
    photolady's Avatar
    photolady
    photolady is offline Lifetime Friend of Site Staff
    Join Date
    Mar 2002
    Location
    At my computer, cruising VDR and watching your back
    Posts
    23,412
    I'm glad you found a fix.
    Reply With Quote Reply With Quote
  12. November 22nd, 2009, 09:36 AM #10
    HAN's Avatar
    HAN
    HAN is offline Virtual PC Specialist!!!
    Join Date
    Feb 2002
    Location
    USA
    Posts
    4,319
    FYI about clickjacking... It's a serious enough problem that MS placed specific protection against it in IE8. http://blogs.msdn.com/ie/archive/200...-defenses.aspx
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules