As if you didn't have enough to worry about, with the stock market crashing and all your savings going south . . . U.S. CERT issued a warning about a new browser exploit called "clickjacking". Worst of all, it even affects Linux browsers. Yikes! Jeremiah Grossman, founder and CTO of WhiteHat Security, U.S. CERT said, "Clickjacking gives an attacker the ability to trick a user into clicking on something only barely or momentarily noticeable. Therefore, if a user clicks on a Web page, they may actually be clicking on content from another page."
All modern browsers are affected (Internet Explorer, Safari, Firefox, Google Chrome, Opera) and no no fix is available. Sweet! You can, however, mitigate the risks by disabling scripting and plug-ins in your browser. Thereby making the whole point of modern browsers ancient history, or at least pretty much moot. To which I must reply, HOLY PENGUIN GUANO!
Firefox users can, if they want, take the Nyah nyah nyah ground with the NoScript Firefox extension. FlashBlock, Adblock Plus, and CustomizeGoogle are also good. Of course, doing all those things pretty much renders the point of modern browsers moot. Did I mention HOLY PENGUIN GUANO!?
Today five randomly drawn entrants will win:
Rock, Paper, Scissors, Lizard, Spock mug and LJ subscription
Enter to Win
|December Daily Giveaways are Back!||Dec 01, 2015|
|December 2015 Video Preview||Nov 30, 2015|
|Take Control of Your PC with UEFI Secure Boot||Nov 30, 2015|
|Geek Hide-away in Guatemala - Stay for Free!||Nov 26, 2015|
|Microsoft and Linux: True Romance or Toxic Love?||Nov 25, 2015|
|Non-Linux FOSS: Install Windows? Yeah, Open Source Can Do That.||Nov 24, 2015|
- Take Control of Your PC with UEFI Secure Boot
- Cipher Security: How to harden TLS and SSH
- Non-Linux FOSS: Install Windows? Yeah, Open Source Can Do That.
- Web Stores Held Hostage
- Microsoft and Linux: True Romance or Toxic Love?
- Firefox's New Feature for Tighter Security
- Geek Hide-away in Guatemala - Stay for Free!
- diff -u: What's New in Kernel Development
- PuppetLabs Introduces Application Orchestration
- IBM LinuxONE Provides New Options for Linux Deployment