←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
133 points shinzub | 3 comments | 14 Jan 25 04:44 UTC | HN request time: 0.625s | source
Show context
IshKebab ◴[17 Jan 25 17:57 UTC] No.42741205[source]▶
Eh, it's hardly seamless, and double clicking is extremely uncommon on the web so that would be a big red flag.
replies(6): >>42741380 #>>42741796 #>>42742040 #>>42742046 #>>42742612 #>>42742733 #
giantrobot ◴[17 Jan 25 18:08 UTC] No.42741380[source]▶
Double clicking on the web is extremely common with older less technically adept users. This same cohort is also the most susceptible to scams.
replies(2): >>42741495 #>>42742597 #
waltwalther ◴[17 Jan 25 18:17 UTC] No.42741495[source]▶
This. I have told my eighty-year-old parents this many times over the years, but it doesn't seem to stick.
replies(2): >>42741709 #>>42742021 #
NotYourLawyer ◴[17 Jan 25 19:04 UTC] No.42742021[source]▶
I’ve tried to explain it many times too, but I can’t really articulate a good, comprehensive rule for when to single and when to double click.
replies(3): >>42742690 #>>42742949 #>>42743510 #
1. Pxtl ◴[17 Jan 25 20:32 UTC] No.42742949[source]▶
When you're on windows and not in the browser, you double-click to launch a file or program in the Explorer (which also is what runs the desktop). Single-click is select.

So, the rule:

List of files on your computer or desktop? Double-click. Otherwise? Don't.

replies(1): >>42743340 #
2. NotYourLawyer ◴[17 Jan 25 21:16 UTC] No.42743340[source]▶
What if I’m opening an email in Outlook? What if I’m looking at something in Control Panel? (That one’s a trick question, since the answer has changed in modern Windows versions.)
replies(1): >>42743926 #
3. Pxtl ◴[17 Jan 25 22:25 UTC] No.42743926[source]▶
I'd say don't do that. Who reads emails?

Although seriously, I find I never break out of the preview in Outlook email. The only spot in Outlook where I really need to double-click is the calendar. Which is annoying.