←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
134 points shinzub | 7 comments | 14 Jan 25 04:44 UTC | HN request time: 0s | source | bottom
Show context
bangaladore ◴[17 Jan 25 19:52 UTC] No.42742529[source]▶
Bit off topic, but what's the reasoning behind messing with the native browser scroll here. Almost gets me motion sick when scrolling through this article.
replies(4): >>42742817 #>>42743138 #>>42743743 #>>42744962 #
1. technion ◴[17 Jan 25 20:17 UTC] No.42742817[source]▶
Marketing people have demanded this on many websites sites I've been involved with. Don't ask me why.
replies(3): >>42742955 #>>42743266 #>>42743702 #
2. dmix ◴[17 Jan 25 20:32 UTC] No.42742955[source]▶
What is it? Smooth scrolling?
replies(1): >>42742983 #
3. bangaladore ◴[17 Jan 25 20:36 UTC] No.42742983[source]▶
From the html:

// SmoothScroll for websites v1.2.1

replies(2): >>42743086 #>>42743455 #
4. braiamp ◴[17 Jan 25 20:49 UTC] No.42743086{3}[source]▶
And this is why NoScript is a required extension. Matrix if you use Chromium based browsers.
5. ndriscoll ◴[17 Jan 25 21:10 UTC] No.42743266[source]▶
Maybe the industry should develop a secret header we can all have our browser send to disable this sort of thing. Like `X-Shibboleet: true`.
6. hombre_fatal ◴[17 Jan 25 21:26 UTC] No.42743455{3}[source]▶
You'd think the library would first check for macOS/iOS which already has far superior smooth scrolling.
7. btown ◴[17 Jan 25 21:57 UTC] No.42743702[source]▶
My hypothesis on this is that marketers who have personal MacBooks but are forced to use Windows computers at work, with mice with notched scroll wheels, find JS-driven smooth scrolling to be superior to the native snapping experience they see at work on many websites. But it wreaks havoc on people who already have computers with native high-resolution trackpads. Alas, the folks at big companies care more about their at-work than at-home experience, and it's been cargo-culted to smaller companies now as well. The conversation "detect if there is indeed a trackpad being used" never even comes up.