←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
133 points shinzub | 1 comments | 14 Jan 25 04:44 UTC | HN request time: 0.234s | source
Show context
IshKebab ◴[17 Jan 25 17:57 UTC] No.42741205[source]▶
Eh, it's hardly seamless, and double clicking is extremely uncommon on the web so that would be a big red flag.
replies(6): >>42741380 #>>42741796 #>>42742040 #>>42742046 #>>42742612 #>>42742733 #
giantrobot ◴[17 Jan 25 18:08 UTC] No.42741380[source]▶
Double clicking on the web is extremely common with older less technically adept users. This same cohort is also the most susceptible to scams.
replies(2): >>42741495 #>>42742597 #
waltwalther ◴[17 Jan 25 18:17 UTC] No.42741495[source]▶
This. I have told my eighty-year-old parents this many times over the years, but it doesn't seem to stick.
replies(2): >>42741709 #>>42742021 #
NotYourLawyer ◴[17 Jan 25 19:04 UTC] No.42742021[source]▶
I’ve tried to explain it many times too, but I can’t really articulate a good, comprehensive rule for when to single and when to double click.
replies(3): >>42742690 #>>42742949 #>>42743510 #
1. wat10000 ◴[17 Jan 25 21:33 UTC] No.42743510[source]▶
In theory: if you’re clicking on a UI element that has some notion of being selected, then a single-click selects it, and you need a double-click to take an action on it. If there’s no notion of selection, then a single click takes an action.

In practice: adherence to this ranges from perfect to abysmal. And users who don’t understand the computer well may not know how to think about whether a given UI element is selectable or not.