←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
134 points shinzub | 2 comments | 14 Jan 25 04:44 UTC | HN request time: 0s | source
Show context
IshKebab ◴[17 Jan 25 17:57 UTC] No.42741205[source]▶
Eh, it's hardly seamless, and double clicking is extremely uncommon on the web so that would be a big red flag.
replies(6): >>42741380 #>>42741796 #>>42742040 #>>42742046 #>>42742612 #>>42742733 #
1. Etheryte ◴[17 Jan 25 18:41 UTC] No.42741796[source]▶
I couldn't even begin to count how many bug reports I've seen over the years that start with "when I accidentally double-click foo, bar happens". It might not be an intentional usage pattern, sure, but that doesn't mean it doesn't happen a lot.
replies(1): >>42743328 #
2. kevinsync ◴[17 Jan 25 21:15 UTC] No.42743328[source]▶
Yeah, I have no data beyond anecdotal to back this up, but I witness A LOT of people double-clicking everything, regardless of what it is. I assume it's because they only got so far in "computer" as to learn "click + drag to move, double-click to open a program or file". Link on a web page? I want to open that!