The Clickjacking Bug that Facebook Won't Fix

guest · Dec 22, 2018

The Clickjacking Bug that Facebook Won't Fix
December 21, 2018
https://www.bleepingcomputer.com/news/security/the-clickjacking-bug-that-facebook-wont-fix/

Spam campaign piques interest
The expert started to analyze the spam campaign after noticing that many of their friends published a link to a website with funny pictures. Before reaching the chucklesome content, users had to declare that they were at least 16 years old.

"After you clicked on the button, you were indeed redirected to a page with funny comic (and a lot of ads). However in the meantime the same link you just clicked appeared on your Facebook wall," the security boffin says in a blog post today.
No bug here, move along
Facebook replied quickly to the report but did not address the problem because it considers that it isn't a security issue as long as it does not impact an account's integrity (e.g. changing settings), the researcher claims.

Nevertheless, the ability to distribute links on other users' Timeline without authorization is a serious problem and it can also be used to distribute links to malware instead of spam.
Click to expand...

Log in or Sign up

The Clickjacking Bug that Facebook Won't Fix

guest Guest

Log in or Sign up

The Clickjacking Bug that Facebook Won't Fix

guest Guest

Useful Searches