Khaws ib lub qhov muag tawm rau ib tus yeeb ncuab tsis pom.
Lawv tsis tuaj yeem pom, lawv tsis tuaj yeem ua rau nrog, thiab lawv xav kom koj khawm koj cov ntawv. Clickjackers tau nyob ib ncig txij li xyoo 2008 tab sis lawv tau txais ntau dua xovxwm lately ua tsaug rau ib tug tshiab yoj ntawm Clickjacking huam tuaj rau cov neeg siv Facebook.
Dab tsi yog Clickjacking?
Kev nias yog qhov suab nrov zoo li lub qhov underground dance craze, tab sis nws nyob deb ntawm nws. Nias lub khawm tshwm sim thaum ib tus kws txuj ci dag neeg los yog lwm tus neeg hauv internet uas tsis muaj leej twg ua qhov chaw tsis muaj leej twg pom los yog lwm tus neeg siv khoom caij saum toj kawg nkaus ntawm phab ntsa nplooj ntawv uas tsis muaj lub ntsej muag los sis hauv interface uas siv cov txheej txheej (uas koj tsis tuaj yeem pom).
Lub vev xaib web site yuav muaj lub khawm uas nyeem: "Nyem qhov no mus saib ib qho video ntawm cov khoom siv zoo nkauj ntxim hlub thiab adorable", tab sis zais rau saum toj ntawm lub pob ntawd yog ib qho khawm pom uas yog ib qhov txuas rau tej yam uas koj tsis xav txwv tsis pub xav mus nias, xws li khawm uas:
- Tricks koj mus hloov cov chaw ceev ntiag tug ntawm koj tus account Facebook
- Tricks koj mus rau hauv "liking" ib yam dab tsi koj yuav tsis nquag nyiam (aka Likejacking)
- Tricks koj mus ntxiv rau koj tus kheej ua ib tug Twitter follower rau ib tug neeg uas tsis tsim nyog koj
- Tricks koj ua tau ib qho ntawm koj lub computer (xws li lub microphone los yog lub koob yees duab)
- Tricks koj mus ua si ua yeeb yam thiab qw "Shih Tzu" rau saum koj lub ntsws. (ok, ok, kuv ntxiv no tus kawg no kom pom tias koj puas tseem hmoog).
Muaj ntau lub sij hawm lub Clickjacker yuav thauj tau ib lub vev xaib hauv ib lub vev-xaij thiab tom qab ntawd cov overlayible cov nyees khawm ntawm sab saum toj ntawm qhov chaw tiag.
Koj Yuav Ua Li Cas Tiv Thaiv Koj Cov Kev Nkag Ntawm Kev Nkag Siab?
1. Hloov tshiab koj tus browser hauv internet thiab plug-ins xws li Flash
Yog hais tias koj tsis tau hloov koj tus browser mus rau qhov tseeb thiab loj tshaj version muaj, ces koj tsis yog tsuas yog ploj ntawm ib qho kev txawj ntse uas tej zaum yuav ua rau koj tsis tau Txuas Txuas, tab sis koj tseem tsis tau zoo dua lwm yam kev ruaj ntseg tshiab uas yog ib feem ntawm newer versions of Firefox, IE, Chrome thiab lwm yam internet browsers. Hloov koj tus browser mus rau qhov tseeb tseeb version muaj. Nws tseem yog ib lub tswv yim zoo los xyuas seb puas muaj ntau qhov tshiab ntawm koj tus browser dua qhov koj tam sim no tau nruab.
Koj yuav tsum tau hloov tshiab browser plug-ins xws li Flash vim qee cov laus dua tej zaum yuav lam tau lam ua rau Kev Tuav Ntaus Nres. Kom kho cov plug-ins hauv internet, mus saib lub vev xaib ntawm txhua tus plug-in txiag thiab download tau qhov tseeb version. Piv txwv, kom rov mus saib flash lub tsev kawm ntawv Flash.
Yog xav paub ntxiv txog kev yuav ua kom koj lub computer ua kom tiav, mus saib peb cov tshooj: Yuav Ua Li Cas Nrog Cov Kev Piam Kom Nkag Siab thiab Cov Patches
Nov yog qee qhov kev ruaj ntseg ntawm lwm yam kev ruaj ntseg:
2. Download Clickjacking Detection / Prevention Software
Txawm tias qee qhov Internet browsers muaj kev txwv tiv thaiv kev tiv thaiv los ntawm Tsujsua, muaj ntau ntau yam kev tu lub lag luam / Kev tiv thaiv kab ntsig uas muaj rau browsers xws li Firefox. Ob peb ntawm lawv yog dawb xwb. Ntawm no yog ob peb txoj kev paub ntau thiab sawv daws muaj nuj nqis:
- NoScript - Ib tug dawb (pub dawb-khoom) los tiv thaiv-clickjacking plug-in rau Firefox.
- Comitari Web Protection Suite-Tsev LE (Tsuas Tseg) - Ib qho tshwj xeeb pub dawb version ntawm Comitari Web Protection Suite. Lub LE version muaj xws li kev tiv thaiv ntiag tug Clickjacking.
Kev tiv thaiv tsis zoo yog tsis yog lub luag haujlwm ntawm tus neeg siv. Cov websites thiab cov neeg tsim daim ntawv thov kev tsim web site kuj muaj lub luag haujlwm tiv thaiv lawv cov ntsiab lus los ntawm kev siv cov nias ntawm Clickjackers
Nrog rau kev kawm zoo dua rau cov neeg siv ntawm Kev Cuam Tshuam, ua li cas yuav paub txog kev tawm tsam, thiab ua li cas los ntawm lawv, ua ke nrog kev pab txhawb nqa ntawm lub website thiab lub web application developers nyob rau hauv coding los tiv thaiv Clickjacking, tej zaum lub ntiaj teb yuav dawb ntawm Clickjackers ib hnub.