We're a community of 1077K IT Pros here for help, advice, solutions, professional growth and fun. Join us!
1,076,451 Members — Technology Publication meets Social Media
Username:
Password:
Lost login information?

Why you should avoid the 101 hottest women on Facebook

0
By Davey Winder on Jun 15th, 2010 2:23 am

Facebook users have been making a lot of use of the new 'like' feature which allows users to link to webpages that they, well, like funnily enough. Not so funny when Facebook users are claiming to like a site called "101 Hottest Women in the World" which features an image of Jessica Alba. But don't be seduced...

Not that I've got anything against the Hollywood actress and sex symbol, but I do have a dislike for clickjacking (or Likejacking if you prefer) and that's what is happening here. According to security experts at Sophos as soon as anyone who is logged into Facebook clicks the like link and arrives at the destination, a single click anywhere on the page will update that user's Facebook profile without permission in order to add another 'like' recommendation and so virally spread the attack to an ever broader audience of unsuspecting fans of hot women.

It accomplishes this by using a hidden invisible button underneath your mouse pointer (a hidden iFrame) which captures any click and redirects it to the 'like' button. Of course, this is just the latest clickjacking attack in recent weeks. We've already seen similar scams using sites with link titles such as "This man takes a picture of himself EVERYDAY for 8 YEARS" and "This Girl Has An Interesting Way Of Eating A Banana" which are designed to attract the curious users within a social network. The attack growth trend is starting to get worrying. At the moment it is being exploited in order to make money via page views, but undoubtedly it won't be long until a more malicious payload is unleashed.

The whole 'like' clickjacking concept could even be seen as yet another nail in the coffin of Facebook, it's certainly doing nothing to fill me with confidence about security on the network that's for sure.

Keep an eye for WePad. It will be linux based.

Alex_
Junior Poster
175 posts since Jun 2008
Reputation Points: 10
Solved Threads: 3
Skill Endorsements: 0

Thanks for bringing this up. Its sad but true that the whole intention of businesses to join Facebook is to grow - either with the intention of the user or not - their business. This is another example why Facebook may shun additional users.

InsightsDigital
Posting Virtuoso
1,761 posts since Jun 2009
Reputation Points: 68
Solved Threads: 9
Skill Endorsements: 5

Oops, i posted in the wrong thread. )

Alex_
Junior Poster
175 posts since Jun 2008
Reputation Points: 10
Solved Threads: 3
Skill Endorsements: 0

i really dont see anything wrong with facebook yet

Netcode
Veteran Poster
1,037 posts since Jun 2009
Reputation Points: 43
Solved Threads: 70
Skill Endorsements: 0

Thanks for sharing the issue here. I haven't had any idea about that. This is one of the examples of badly using social networking like facebook!

mystryworld
Light Poster
46 posts since Nov 2009
Reputation Points: 10
Solved Threads: 1
Skill Endorsements: 0

yes thank you for sharing this article as well.

data-struction
Light Poster
29 posts since Sep 2011
Reputation Points: 10
Solved Threads: 1
Skill Endorsements: 0

Ant social networking site has a flaw too. Thanks for sharing this.

stellaandreapar
Newbie Poster
19 posts since Sep 2011
Reputation Points: 4
Solved Threads: 0
Skill Endorsements: 0

Great post! I completely agree.

rocco88
Junior Poster
103 posts since Jun 2011
Reputation Points: 5
Solved Threads: 2
Skill Endorsements: 0

Post: Markdown Syntax: Formatting Help
 
You
View similar articles that have also been tagged:
 
© 2013 DaniWeb® LLC
Page rendered in 0.1031 seconds using 2.78MB