←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
237 points shinzub | 2 comments | 1/14/2025, 4:44:00 AM | HN request time: 0.421s | source
Show context
bangaladore ◴[1/17/2025, 7:52:00 PM] No.42742529[source]▶

Bit off topic, but what's the reasoning behind messing with the native browser scroll here. Almost gets me motion sick when scrolling through this article.

replies(5): >>42742817 #>>42743138 #>>42743743 #>>42744962 #>>42750165 #
technion ◴[1/17/2025, 8:17:00 PM] No.42742817[source]▶

Marketing people have demanded this on many websites sites I've been involved with. Don't ask me why.

replies(3): >>42742955 #>>42743266 #>>42743702 #
1. ndriscoll ◴[1/17/2025, 9:10:00 PM] No.42743266[source]▶

Maybe the industry should develop a secret header we can all have our browser send to disable this sort of thing. Like `X-Shibboleet: true`.

replies(1): >>42748735 #
2. jeroenhd ◴[1/18/2025, 2:48:00 PM] No.42748735[source]▶

A uBlock rule for smooth scrolling libraries can do wonders, though on some pages that breaks all JS scripts because of brittle JS assuming certain objects are magically instantiated.