Webcam ClickJacking

Go to http://guya.net for more info -
Exploiting ClickJacking flaw to remotely connect to the user's webcam and microphone.

Category:

Science & Technology

Tags:

• ClickJacking
• security
• webcam
• camera
• browsers
• Adobe
• Flash
• CSRF
• cross
• site
• request
• forgery
• guya.net

[moonlitmurloc]

And then God said... "Let there be NoScript!" And there was NoScript, and God saw it, and it was good. And then God said "Let there be updates!" And there were updates, and God saw it, and it was better!

[pitklong]

thanx! this is my last hope to get my webcam started!

[hienbeohd251]

ClickJacking

[msncams]

clickjack(dot)net

[Epsilon3G]

genius

[kriptonis]

@flatronL1917 antivirus don't do shit against these types of attacks. Because it's not a virus, it's your browser. An antivirus can't defend you from yourself. And remember you are the one doing the clicks.

Best is: if you don't trust a site, don't use it. And always prefer to type the url of your trusted sites than to click on a link. Even if that link is on google.

[roejames12]

*Sigh* Another malicious programmer who found an awesome "hack" and got his dream of recording people. >.< Good thing it's fixed. :)

[RandomNinjaOfEvil]

genius

[14isacolor]

@flatronL1917 OR.... you could do the obvious thing and cover the webcam with tape.

Better yet, use an external webcam that you can unplug when you're not using it.

[AurynThePaladin]

lolol *click* JACKED ... *click* JACKED

So many people musta fallen for this.

[fashnek]

Clickjacking involves getting people to click on things that they don't know they're clicking on. In this case, some of those jumping buttons happened to be in the same place as dialog controls that were on top but invisible -- so the user changed an option and allowed his camera to be used by Flash (a security vulnerability).