using js to steal facebook - icir · using js to steal facebook likes ... expires: friday, april...
TRANSCRIPT
![Page 1: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/1.jpg)
![Page 2: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/2.jpg)
From Clickjacking: Attacks and Defenses, by Lin-Shung Huang et al, Carnegie Mellon University / Microsoft Research
Using JS to Steal Facebook Likes
• Bait-and-switch • Note: many of these attacks are similar to TOCTTOU (Time of Check to Time of Use) vulnerabilities
Claim your FREE iPad
![Page 3: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/3.jpg)
From Clickjacking: Attacks and Defenses, by Lin-Shung Huang et al, Carnegie Mellon University / Microsoft Research
Compromise visual integrity – target • Hiding the target • Partial overlays
Click
$0.15 $0.15
![Page 4: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/4.jpg)
From Clickjacking: Attacks and Defenses, by Lin-Shung Huang et al, Carnegie Mellon University / Microsoft Research
Clickjacking to Access the User’s Webcam
Fake cursor
Real cursor
![Page 5: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/5.jpg)
![Page 6: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/6.jpg)
![Page 7: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/7.jpg)
![Page 8: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/8.jpg)
![Page 9: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/9.jpg)
![Page 10: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/10.jpg)
![Page 11: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/11.jpg)
![Page 12: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/12.jpg)
![Page 13: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/13.jpg)
![Page 14: Using JS to Steal Facebook - ICIR · Using JS to Steal Facebook Likes ... Expires: Friday, April 16, 2027 AM PT O This certificate is valid Expires Aug 2, 2028 PM Aug 1, 2028 4'59:59](https://reader035.vdocument.in/reader035/viewer/2022070800/5f0213257e708231d402725b/html5/thumbnails/14.jpg)