Hijacked, No – Clickjacked!

Oh I was reading a article by Robert Hansen and Jeremiah Grossman on Clickjacking. This sounds similar to hijacking and more or less is the same. Though I had heard about this before but did not knew how much harm it can do.

So, what’s clickjacking. It’s hijacking your mouse click for malicious intent. It’s done by loading a critical web page containing confidential information in an invisble frame in front of the page created by the cracker. So, when you are just playing or clicking a button you see on the web page you could be actually pressing another hidden button which could do much harm like deleting your mails, emptying your bank account or even monitoring you with your own webcam and microphone.

How it’s done?

Let’s take an example to understand clickjacking. Let us assume you are viewing your mails in your inbox in one tab of the browser. In the mean time you load a web page of a cracker, name it Crac. Crac’s  innocent looking webpage contains a script to load the mail’s website in a invisible iframe in front of it’s original webpage. Meanwhile you press a button on Crac’s webpage and what really happens that you end up clicking ‘delete all mails’ button on your mail service. Your mails are gone forever.

You got worried on losing your mails, huh? Well, thank God for it wasn’t your bank’s online account or you had been ending up losing all your money to Crac. Also, if it had access to some plugin like Adobe Flash (now fixed) they could even spy on you using your own webcam.

Finally the good news and the bad news. Bad news – You are at mercy of a malicious cracker and he could do as much harm to you as he likes until this exploit is fixed. Good news – Many organisations like Adobe, Google have come up with a solution for busting frames to protect their services but their effectiveness is unevaluated.

For more info read this original paper:

http://www.sectheory.com/clickjacking.htm

Posted on May 3rd, 2009 by Fakhruddin  |  No Comments »

Poll and Pool – Go Banana!

Now this is what I should call “a day”!

Day before yesterday I came to Indore to celebrate my holidays and moreover to celebrate the “Great Festival of Democracy”. Ya this was the first time I am voting. So, my day began early in the morning with only one goal in mind – to cast my vote. I went to polling booth at 10 am for voting. There I suffered scorching heat but Sun surrendered against the will of Indian citizens. I happily voted for *** since in my view this people are less corrupt than their opponents. Though I have to say that who ever wins, only Janta (citizens) loses. I really loved the ink mark on my left hand’s index finger.

After the end of my democratic duties for the day,  I am going to have some fun. So, what’s better place to enjoy than Hotel Sayaji’s bowling alley “Go Banana”. I went there in midst of the afternoon but Sun appeared less harsh this time. I am trying my hands on Bowling for the second time since I first played it in December. But to my despair the competion wasn’t very interesting since I lose. My score stood at a mere 65, even my friend a first timer scored better than me and also I had scored better the first time.

We are out now from there hoping evening’s gonna be fine and came to TI for enjoying some time doing bird watching but found no ‘Hansini’ and the mall was full of ‘crows’. We had some delicious Chocolate Pudding, Chocolate cake, dosa, fried idlis and miscellaneous stuff to satisfy overselves.

Now it’s time to come back home like ‘Sharif Bachhe’ but we took the risk of hanging at a pool near my friend’s home. OK now I am trying pool for the first time in my life though I didn’t found it very hard to understand how to play. In my view it’s just big Carrom board played with sticks. The game went very interesting, with me and my friend playing hard to force the ball in the pocket and the crowd surronding us were wondering when the foolish duo will end their match. It took 35 minutes and damn I lose here too but with lesser margin and pocketing the last ball myself but in the incorrect pocket. This was a huge relief for the people who were waiting for their turn for the last half an hour. Now I am going back home because it’s too late (and also I don’t want to lose a third game the same day).

Posted on May 1st, 2009 by Fakhruddin  |  2 Comments »

Introducing Me

So, as the ritual goes, let me take some time to introduce myself. Hi I am Fakhruddin Ali, studying (I mean trying to do so) in Maulana Azad National Institute of Technology Bhopal, better known as MACT.

I am a resident of Indore and living in a rented room in Bhopal. To be precise about Bhopal, beautiful scenery and opposite for girls, good non-veg food, no multiplex no mall but good deals at shops in Old Bhopal and a beautiful (but dry at present) lake.

I was born in Dubai(UAE) on a fine dawn in September. I did my pre-primary upto class 1 from Progressive English School, Sharjhah.

If you talk about my school days, they were mind blowing. I enjoyed my days at Malwa Cambridge H.S. School very much and always pray that may God gift me a chance to relive that moments. Amen.

Posted on April 30th, 2009 by Fakhruddin  |  2 Comments »