←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
237 points shinzub | 2 comments | 14 Jan 25 04:44 UTC | HN request time: 1.855s | source
Show context
bangaladore ◴[17 Jan 25 19:52 UTC] No.42742529[source]▶
Bit off topic, but what's the reasoning behind messing with the native browser scroll here. Almost gets me motion sick when scrolling through this article.
replies(5): >>42742817 #>>42743138 #>>42743743 #>>42744962 #>>42750165 #
technion ◴[17 Jan 25 20:17 UTC] No.42742817[source]▶
Marketing people have demanded this on many websites sites I've been involved with. Don't ask me why.
replies(3): >>42742955 #>>42743266 #>>42743702 #
1. ndriscoll ◴[17 Jan 25 21:10 UTC] No.42743266[source]▶
Maybe the industry should develop a secret header we can all have our browser send to disable this sort of thing. Like `X-Shibboleet: true`.
replies(1): >>42748735 #
2. jeroenhd ◴[18 Jan 25 14:48 UTC] No.42748735[source]▶
A uBlock rule for smooth scrolling libraries can do wonders, though on some pages that breaks all JS scripts because of brittle JS assuming certain objects are magically instantiated.