November 9, 2010 11:52 PM
Posted by: Dan O'Connor
click jacking,
clickjacking,
facebookHow much further can click jacking in facebook go?
Right now the main ones that I have seen are working to either gather information (or just a prof of concept) and try to use a browser vulnerability on the redirected page to infect the host.
Another from the Sophos blog tries to get you on a...
October 29, 2010 12:10 AM
Posted by: Dan O'Connor
facebook,
hijackI love it when people do all of the work for you.
http://codebutler.github.com/firesheep/
Firesheep is a FireFox plugin to hijack FB session, it looks really good.
There is a slide show here
http://codebutler.github.com/firesheep/tc12/
With a short demo.
Here is a shot of the...
October 25, 2010 11:15 PM
Posted by: Dan O'Connor
facebookInteresting note, applications can permit access to your 'personal' information on facebook. Not only your information directly, but if one of your friends has the application installed, it will have access to their friends data.
Is that really something that users need?
Not really.
Now...
October 13, 2010 7:10 PM
Posted by: Dan O'Connor
facebookI have talked about creating fake facebook profiles to gather information from people. But I saw a couple things in the last two weeks that I thought was neat.
http://www.networkworld.com/news/2010/091910-interpol-chief-has-facebook-identity.html
That is too funny, it sounds like who ever did...
October 12, 2010 8:25 PM
Posted by: Dan O'Connor
facebookA little older post from isc.sans.edu about more 'like' stuff at facebook.
http://isc.sans.edu/diary.html?storyid=9556
Not exactly the same as what I previously posted, but it's something else to read.
Sure can make facebook live up to it's number two threat vector on the internet.
I...
October 3, 2010 12:21 AM
Posted by: Dan O'Connor
exploits,
facebook,
java scriptSomething strange is going around the facebooks in the last couple days, I noticed a few people posting this 'like' but did not pay much attention to it.
http://mashable.com/2010/10/01/warning-facebook-like-worm-spreading-through-javascript-exploit/
The story says that it does not appear to...
July 18, 2010 12:33 AM
Posted by: Dan O'Connor
facebook,
facebook sql,
inj3ct0r,
inj3ct0r facebookThe inj3ct0r team did a real good job with this write up,
http://inj3ct0r.com/exploits/11638
In the next few days I will pull a few quotes out of it and try to expand a little more on whats going on.
Enjoy!
