Review your Internet Security
United States Computer Emergency Research team, US-CERT, has issued a warning about a serious vulnerability of all the popular Browsers like IE, Firefox, Opera, Safari etc. They have warned about an an attack that inserts itself in the middle of a user’s interaction with a Web page through clicking buttons. As soon as a person clicks on a link on a web page, his browser can perform any arbitrary function, including redirecting the browser to a third-party site, and a totally unwanted function may get performed.
This is called ClickJacking
According to one of the reports, Clickjacking gives an attacker the ability to trick a user into clicking on something only barely or momentarily noticeable. Therefore, if a user clicks on a web page, they may actually be clicking on content from another page. A separate report indicates that this flaw affects most web browsers and that no fix is available, but that disabling browser scripting and plug-ins may help mitigate some of the risks.
And the worst part is that not only the malicious web pages, any legit site like Newsweek, Digg or BBC may carry this to you. The exact magnitude of risks is yet to come out, but is clear that present browsers are incapable of avoiding it.
In such a situation you can only hope to not come across it, while browsing.
So, right now, there are four options for you.
- Stop Browsing the Internet, I know you can’t do it.
- Suspend your browsing and wait till these browsers get updated, this is also difficult.
- Start using Firefox, and install NoScript firefox plugin., You may not like it either, because this will make many of the sites you visit to appear as broken.
- Pray, that you do not fall victim to the attack.
I think the only option is the last one.










September 27th, 2008 at 9:38 pm
The fourth option is for me…
October 2nd, 2008 at 1:37 am
I think I wll choose option # 3. Thanks for warning
October 8th, 2008 at 5:16 am
I think most of us opt for option 4 and hope for the best! Unfortunately this kind of risk is part and parcel of the privilege to have the internet available. And it is likely to get worse as technology evolves. Let’s hope that the browsers become more adept at stopping this kind of stuff…
October 9th, 2008 at 11:12 am
Number 4 sounds like the best I can do right now, although #3 might be a wise choice just as some added security to make you feel better.
October 11th, 2008 at 11:06 am
Lolz.. this tool rates your site (wbtoolsandtips) as not trusted
October 11th, 2008 at 2:15 pm
How is this any different from previous threats and how dangerous could it be? I am not quite clear on why this is so dangerous. The ability to manipulate what happens when a link is clicked with scripting has existed for a long time.
October 25th, 2008 at 10:48 pm
#1 and 2 are obviously not possible, and #3 is possible only if you browse content heavy (a ‘la 1990s) websites. Which basically means we’re helpless and have to hope for the best
October 27th, 2008 at 5:39 am
This is a scary thought. I wonder why it hasn’t gotten a lot of press?
I’ll got for option 4 as well.
I don’t think it’s all that serious for someone in the know, someone who can clearly see what’s happening, but I’ll keep an eye out for this…