{"id":24759,"date":"2019-05-01T08:25:32","date_gmt":"2019-05-01T13:25:32","guid":{"rendered":"http:\/\/huewhite.com\/umb\/?p=24759"},"modified":"2019-05-01T08:25:32","modified_gmt":"2019-05-01T13:25:32","slug":"word-of-the-day-466","status":"publish","type":"post","link":"https:\/\/huewhite.com\/umb\/2019\/05\/01\/word-of-the-day-466\/","title":{"rendered":"Word Of The Day"},"content":{"rendered":"

Clickjack<\/em>:<\/p>\n

Clickjacking<\/b>\u00a0(classified as a\u00a0User Interface redress attack<\/b>,\u00a0UI redress attack<\/b>,\u00a0UI redressing<\/b>) is a\u00a0malicious technique<\/a>\u00a0of tricking a\u00a0user<\/a>\u00a0into clicking on something different from what the user perceives, thus potentially revealing\u00a0confidential<\/a>\u00a0information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including\u00a0web pages<\/a>.[1]<\/a><\/sup>[2]<\/a><\/sup>[3]<\/a><\/sup>[4]<\/a><\/sup><\/p>\n

In web browsers,<\/i>\u00a0clickjacking is a\u00a0browser security<\/a>\u00a0issue that is a\u00a0vulnerability<\/a>\u00a0across a variety of\u00a0browsers<\/a>\u00a0and\u00a0platforms<\/a>. Clickjacking can also take place outside of web browsers, including applications.[5]<\/a><\/sup><\/i><\/p>\n

A clickjack takes the form of embedded\u00a0code<\/a>\u00a0or a script that can execute without the user’s knowledge, such as clicking on a\u00a0button<\/a>that appears to perform another function.[6]<\/a><\/sup><\/p>\n

Clickjacking is an instance of the\u00a0confused deputy problem<\/a>, wherein a computer is innocently fooled into misusing its authority.\u00a0[Wikipedia<\/strong><\/a>]<\/em><\/p><\/blockquote>\n

Noted in “How hackers use tricks to make money from your clicks<\/em><\/a>,” Donna Lu, NewScientist<\/strong><\/em> (20 April 2019, paywall):<\/p>\n

So certain websites contain tricks to get people to click. For example, an apparent link to a news story may actually take users to an advertising site earning the owner ad money, invisible objects that cover parts of a page could register as ad clicks when clicked, and hyperlinks that open an ad first before redirecting to the intended website also result in stolen clicks without the clicker realising.<\/p>\n

The team scoured the internet\u2019s top 250,000 most popular websites and found 613 sites with so-called clickjacking code. Though this totalled less than 1 per cent of the websites they looked at, it amounted to a total daily traffic of 43 million visits. On these pages, more than 3000 hyperlinks had been secretly inserted.<\/p><\/blockquote>\n

Just a random thought: Is this going to be like cancer? The Web so thoroughly ruined by the unprincipled that, one day, the whole thing just collapses as people stop using it?<\/p>\n","protected":false},"excerpt":{"rendered":"

Clickjack: Clickjacking\u00a0(classified as a\u00a0User Interface redress attack,\u00a0UI redress attack,\u00a0UI redressing) is a\u00a0malicious technique\u00a0of tricking a\u00a0user\u00a0into clicking on something different from what the user perceives, thus potentially revealing\u00a0confidential\u00a0information or allowing others to take control of their computer while clicking on seemingly innocuous objects, including\u00a0web pages.[1][2][3][4] In web browsers,\u00a0clickjacking is a\u00a0browser security\u00a0issue \u2026 Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-24759","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/posts\/24759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/comments?post=24759"}],"version-history":[{"count":1,"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/posts\/24759\/revisions"}],"predecessor-version":[{"id":24760,"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/posts\/24759\/revisions\/24760"}],"wp:attachment":[{"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/media?parent=24759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/categories?post=24759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/huewhite.com\/umb\/wp-json\/wp\/v2\/tags?post=24759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}