clickjacking

Tip: Be careful where you click: There are no known defenses against clickjacking, the computer scientists said.

Clickjacking – an attack in which harmful links created by criminals are made to look like legitimate portions of the site – also seems like a possible problem. Healthcare.gov is also vulnerable to pharming as it lacks any form of identity cue – there is no obvious proof to technically-unsophisticated users that the system with which they are interacting is actually healthcare.gov.

That’s a newer version of an old trick known as “clickjacking” that redirects a user’s click to perform hidden functions.

He later saw that Adobe had posted an advisory about the clickjacking issue in 2011, but had declared the issue “resolved.”

In the mean time, Chrome users can protect themselves with browser extensions like NotScript and ScriptSafe, which block the scripts Homakov’s clickjacking trick triggers.