hackademix.net » Pure Java™, Pure Evil™ PopupsIf you’re using Opera or a Gecko-based browser, a similar full screen evil can be performed with just a few JavaScript lines. No need to compile and host any applet, thanks to the LiveConnect technology. hackademix.net » Pure Java™, Pure Evil™ Popups(hackademix.net) L'horrible exite : des popups impossibles à bloquer, pouvant couvrir tout l'écran et impossible à fermer. Une seule possibilité : Ne plus utiliser de Java ( 4 , 27 ) Danger from full screen browser popups due to java issues...Well, this is pure evil.The wettest dream of any phisher or web advertiser.A full screen window which can't be stopped by popup blockers and can not be closed by the user (without killing the browser). ( 8 ) Pure Java™, Pure Evil™ Popups( 49 ) how popup blockers can be easily circumvented using Java (The Java Popup you Can't Stop)An anonymous reader writes "In his brand new hackademix.net blog, Giorgio Maone, known as the author of the NoScript security extension for Firefox, reveals how popup blockers can be easily circumvented using Java. Worse, popups opened this way are really evil, because they can be sized to cover the whole desktop (the wet dream of any phisher) and cannot be closed by user (the wet dream of any web advertiser). Impressive demos available, all cross-browser and cross-platform, in the best Java tradition: 'Write once, hack anywhere' " ( 305 ) Imagine you're a web advertiser.Imagine you can open a pop...Imagine you're a web advertiser.Imagine you can open a popup window from a web page defeating any popup blocker.Imagine this popup can invade the whole desktop, full screen.Imagine this popup has no title bar, no menus, no toolbar, no location bar, no border and no buttons. No mean to close it.Imagine user can't move or minimize this popup. It will go away only when the browser is killed or your show is done...I'm scared now... ( 1 ) - 8 Aug 2007, 5:25pm in it, web, popup, geek, dev, hack, hacks, firefox, browser, mozilla, security, javascript, java, applet, spam, opera, phishing, fullscreen, and exploit |
