1,105,254 Community Members

Why you should avoid the 101 hottest women on Facebook

Member Avatar
(happygeek)
Reputation Points: 1,411 [?]
Q&As Helped to Solve: 451 [?]
Skill Endorsements: 166 [?]
 
0
 

Facebook users have been making a lot of use of the new 'like' feature which allows users to link to webpages that they, well, like funnily enough. Not so funny when Facebook users are claiming to like a site called "101 Hottest Women in the World" which features an image of Jessica Alba. But don't be seduced...

Not that I've got anything against the Hollywood actress and sex symbol, but I do have a dislike for clickjacking (or Likejacking if you prefer) and that's what is happening here. According to security experts at Sophos as soon as anyone who is logged into Facebook clicks the like link and arrives at the destination, a single click anywhere on the page will update that user's Facebook profile without permission in order to add another 'like' recommendation and so virally spread the attack to an ever broader audience of unsuspecting fans of hot women.

It accomplishes this by using a hidden invisible button underneath your mouse pointer (a hidden iFrame) which captures any click and redirects it to the 'like' button. Of course, this is just the latest clickjacking attack in recent weeks. We've already seen similar scams using sites with link titles such as "This man takes a picture of himself EVERYDAY for 8 YEARS" and "This Girl Has An Interesting Way Of Eating A Banana" which are designed to attract the curious users within a social network. The attack growth trend is starting to get worrying. At the moment it is being exploited in order to make money via page views, but undoubtedly it won't be long until a more malicious payload is unleashed.

The whole 'like' clickjacking concept could even be seen as yet another nail in the coffin of Facebook, it's certainly doing nothing to fill me with confidence about security on the network that's for sure.

Member Avatar
Davey Winder

I'm a hacker turned writer and consultant, specialising in IT security. I've been a freelance word punk for over 20 years and along the way I have seen 23 of my books published, produced and presented programmes for TV and radio, picked up a bunch of awards and continue being a contributing editor with PC Pro - the best selling IT magazine in the UK .

Member Avatar
Alex_
Junior Poster
175 posts since Jun 2008
Reputation Points: 0 [?]
Q&As Helped to Solve: 3 [?]
Skill Endorsements: 0 [?]
 
0
 

Keep an eye for WePad. It will be linux based.

Member Avatar
InsightsDigital
Posting Virtuoso
1,740 posts since Jun 2009
Reputation Points: 57 [?]
Q&As Helped to Solve: 9 [?]
Skill Endorsements: 9 [?]
 
0
 

Thanks for bringing this up. Its sad but true that the whole intention of businesses to join Facebook is to grow - either with the intention of the user or not - their business. This is another example why Facebook may shun additional users.

Member Avatar
Alex_
Junior Poster
175 posts since Jun 2008
Reputation Points: 0 [?]
Q&As Helped to Solve: 3 [?]
Skill Endorsements: 0 [?]
 
0
 

Oops, i posted in the wrong thread. )

Member Avatar
Netcode
Veteran Poster
1,049 posts since Jun 2009
Reputation Points: 33 [?]
Q&As Helped to Solve: 86 [?]
Skill Endorsements: 8 [?]
 
0
 

i really dont see anything wrong with facebook yet

Member Avatar
mystryworld
Light Poster
46 posts since Nov 2009
Reputation Points: 0 [?]
Q&As Helped to Solve: 1 [?]
Skill Endorsements: 0 [?]
 
0
 

Thanks for sharing the issue here. I haven't had any idea about that. This is one of the examples of badly using social networking like facebook!

Member Avatar
data-struction
Light Poster
29 posts since Sep 2011
Reputation Points: 0 [?]
Q&As Helped to Solve: 1 [?]
Skill Endorsements: 0 [?]
 
0
 

yes thank you for sharing this article as well.

Member Avatar
stellaandreapar
Newbie Poster
19 posts since Sep 2011
Reputation Points: -6 [?]
Q&As Helped to Solve: 0 [?]
Skill Endorsements: 0 [?]
 
0
 

Ant social networking site has a flaw too. Thanks for sharing this.

Member Avatar
rocco88
Junior Poster
103 posts since Jun 2011
Reputation Points: -5 [?]
Q&As Helped to Solve: 2 [?]
Skill Endorsements: 0 [?]
 
0
 

Great post! I completely agree.

You
Post:
Start New Discussion
View similar articles that have also been tagged: