←back to thread

DoubleClickjacking: A New type of web hacking technique

(www.paulosyibelo.com)
237 points shinzub | 2 comments | 14 Jan 25 04:44 UTC | HN request time: 0.404s | source
Show context
maxrmk ◴[17 Jan 25 19:52 UTC] No.42742521[source]▶
This is clever, and I got a good laugh out of their example video. The demo UI of "Double click here" isn't very convincing - I bet there's a version of this that gets people to double click consistently though.
replies(4): >>42743385 #>>42743421 #>>42744773 #>>42746149 #
seanwilson ◴[18 Jan 25 00:50 UTC] No.42744773[source]▶
Why stop at double-click? "Click here 10 times quickly to confirm you're human". Or some kind of clicker game.
replies(1): >>42745053 #
1. temporallobe ◴[18 Jan 25 01:47 UTC] No.42745053[source]▶
Like in reCAPTCHA (v2 at least) where it asks users to click on tiles to identify common objects like bridges or motorcycles. Surely one could conjure up a fake version of this.
replies(1): >>42746804 #
2. seanwilson ◴[18 Jan 25 08:29 UTC] No.42746804[source]▶
I've seen people complete actual CAPTCHAs that were something like "Click here exactly 10 times to prove you're human" so I don't think you'd need anything fancy. People wouldn't stop to question it and are used to doing much weirder CAPTCHAs without understanding what they're for.