Protect yourself from Flash Player's clickjacking vulnerability
Adobe has announced that there is a known clickjacking vulnerability in the current Flash player. If you're looking to protect yourself, there are two possible remedies.
Adobe has a workaround posted on their web site. Visit the Flash player settings panel and click always deny on the global privacy settings.
Firefox users would do well to install the NoScript addon, which has updated clickjacking defenses. "ClearClick" protection was added in version 1.8.2, but is now enabled by default. It's designed to prevent user with UI elements that are not visible. In layman's terms, it should keep you from clicking on a button that you didn't know was there.
[via Hackademix]













Comments
2
Subscribe to commentsAllyOct 8th 2008 9:48PM
I have to use my webcam for one of my online classes...so I can't do "always disable". I chose "always ask", will that do?
ElphizmoOct 9th 2008 10:15AM
The Flashblock plugin works quite well too.
http://flashblock.mozdev.org/