←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
134 points shinzub | 1 comments | 14 Jan 25 04:44 UTC | HN request time: 0s | source
Show context
IshKebab ◴[17 Jan 25 17:57 UTC] No.42741205[source]▶
Eh, it's hardly seamless, and double clicking is extremely uncommon on the web so that would be a big red flag.
replies(6): >>42741380 #>>42741796 #>>42742040 #>>42742046 #>>42742612 #>>42742733 #
giantrobot ◴[17 Jan 25 18:08 UTC] No.42741380[source]▶
Double clicking on the web is extremely common with older less technically adept users. This same cohort is also the most susceptible to scams.
replies(2): >>42741495 #>>42742597 #
waltwalther ◴[17 Jan 25 18:17 UTC] No.42741495[source]▶
This. I have told my eighty-year-old parents this many times over the years, but it doesn't seem to stick.
replies(2): >>42741709 #>>42742021 #
NotYourLawyer ◴[17 Jan 25 19:04 UTC] No.42742021[source]▶
I’ve tried to explain it many times too, but I can’t really articulate a good, comprehensive rule for when to single and when to double click.
replies(3): >>42742690 #>>42742949 #>>42743510 #
1. cobbal ◴[17 Jan 25 20:06 UTC] No.42742690{3}[source]▶
Another complicating factor that many less-tech-literate don't have a good internal model for is window focus. I've seen several people try and single-click on a not focused web button, only for nothing to happen. When they click again, the button is activated. They then learn to always double click that button.

Having a mental model of "this button needs to be double clicked" gets them the result they want, even if that's not a very accurate reflection of the computer.