xploitable at gmail
May 10, 2008, 8:03 PM
Views: 437
Permalink
|
|
First case of Cyber Rolling?
|
|
Scaring people with fullScreen
* Posted by bunnyhero
* 2008 May 10
When Flash Player 9 goes into full screen mode, it pops up a little
security message that tells the user how to exit full screen mode. It
appears as white text on a semi-transparent black background so it is
generally always visible (which is good). Still, I wondered if it
could be obscured.
The message is always on top, so it is impossible to draw over it. But
what if we tried distracting the user from the actual security
message?
Here's a silly test:
Of course, you can press Esc (or alt+tab to another window) to escape.
UPDATE: I have made the source code available, warts and all, under a
ZLib licence. Share and enjoy :)
http://www.bunnyhero.org/2008/05/10/scaring-people-with-fullscreen/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
|
First case of Cyber Rolling?
