6 thoughts on “I am a rock

  1. NoScript varnar mig när jag klickar på bilden. Varningen förklaras så här.

    ClearClick is a NoScript specific anti-Clickjacking protection module developed during the September 2008 “Clickjacking panic”. It received testing and feedback from many involved security researches such as RSnake and Jeremiah Grossman (the fathers of the term “Clickjacking”), Eduardo “Sirdarckcat” Vela and others, and now it’s enabled by default, protecting NoScript users from Clickjacking everywhere: it even remains active if you switch NoScript in the less safe Allow scripts globally mode. How does it work? Clickjacking hides or displaces or partially covers something you wouldn’t want to click, if you could see it in its original context. ClearClick does the opposite: whenever you click a plugin object or a framed page, it takes a screenshot of it alone and opaque (i.e. an image of it with no transparencies and no overlaying objects), then compares it with a screenshot of the parent page as you can see it. If the two images differ, a clickjacking attack is probably happening and NoScript raises a “ClearClick warning”, showing you the contextualized and “clear” object you were about to click, so you can evaluate by yourself if that was really something you wanted to do. Of course there are many subtle technical details involved, but the basic concept is just simple like that.

    Men det är väl bara en länk till YouTube? Eller?

    Like

      • Jag kör Firefox. För att skydda mig mot skadlig kod (så gott det nu går) använder jag tillägget NoScript. Det innebär att jag måste godkänna skript för varje sida. En hel del av den skadliga kod som drabbar folk (fram för allt då sådana som kör Windows 😉 ) sker för att koden tillåts köras automatiskt.

        Nu verkar det här var en så kallad falsk positiv. Så jag litar på att allt är OK. Jag vill gärna höra en av mina absouta favoriter från tonårstiden. 🙂

        Like

Leave a comment