Browsing the archives for the Uncategorized category.

Like this

Uncategorized

Facebook is probably going to be mad about this, but whatever. Clickjacking the Facebook Like Button is so simple that anyone could figure it out within a few minutes with some really basic JS. I put together a really basic example, similar to what the major clickjacking scam this weekend was doing. I used jQuery just because I was too lazy to remove it from my default page template, but it would be very simple to do it without as well. Example is up here.

Basically all they do is set the Like Buttons iframe opacity to 0 and positioning to absolute, then track mouse movements, keeping the hidden iframe underneath your cursor. With a little tweaking of positioning you get the actual button part of the iframe always under the cursor, so any clicks register as a click on there.

The only one disadvantage is that if people click more than once, it will trigger an unlike. You could easily get around this one too by setting a cookie / localStorage after the first click.

More information in this post on Mashable about what the clickjacking scam was this holiday weekend.

P.S. I put the example on a domain I don’t use just incase facebook decides to block it or something

4 Comments
« Older Posts
    1. Yesterday

      1. Purchased Words With Friends - Newtoy Inc..

        1:15am via iTunes

    2. July 28th

      1. @beachpizza loves scissoring [zachallia]

        10:24pm via Twitter

      2. Purchased foursquare - foursquare.

        9:06pm via iTunes

      3. @shervin congrats!! how did you get that? I've got a few referrals that joined I want VIP!! [zachallia]

        9:00pm via Twitter

    3. July 27th

      1. @hotlou awesome.. hadn't seen those new types of feed stories yet.. i'm itching to give likebutton an overhaul [zachallia]

        4:52am via Twitter

      2. @VirginAmerica red [zachallia]

        4:49am via Twitter

      3. this is awesome: http://www.apple.com/magictrackpad/ [zachallia]

        6:05pm via Twitter

      4. Shared Hipstamatic Contest Entry.

        2:50pm via Flickr

      5. Shared Hipstamatic Contest Entry.

        2:49pm via Flickr

    4. July 26th

      1. BBC coffee haus porter — at Sunset Grill & Tap http://gowal.la/r/XJeW [zachallia]

        12:57am via Twitter

      2. @beachpizza start running [zachallia]

        12:54am via Twitter

      3. Drinking beers — at Boston Beer Works http://gowal.la/r/XGEt [zachallia]

        10:24pm via Twitter

      4. Just had a sandwich, feeling alive [zachallia]

        4:57pm via Twitter

      5. RT @aaronberny: Tonight: @Furnacesucks @LateNiteWars Luau, Daniel Striped Tiger, and White Problems at Great Scott. $7 9pm 18+ [zachallia]

        4:57pm via Twitter

    5. July 25th

      1. @BostonTweet jk that's creepy let's be friends [zachallia]

        3:30am via Twitter

      2. @billabong dude [zachallia]

        3:29am via Twitter

      3. @bostontweet drinking old Cuban at eastern standard, thinking of you... Xoxoxo [zachallia]

        3:25am via Twitter

      4. Sunset with @beachpizza & @krrysstall .. So pumped to be in Boston [zachallia]

        1:43am via Twitter

      5. @loversspit see you there later yessssssssssssssssssssssss [zachallia]

        1:39am via Twitter

      6. BBC coffeehaus porter is the best beer in the world, hands down http://yfrog.com/n2svtj [zachallia]

        1:39am via Twitter

      7. Purchased AT&T myWireless Mobile - AT&T Inc..

        9:49pm via iTunes

      8. @SpikeRawbones would be a cool iphone app to do driving statistics [zachallia]

        3:17pm via Twitter

    6. July 24th

      1. @ErnNicole yeah but you hallucinate sometimes and talk to yourself [zachallia]

        12:22am via Twitter

      2. @petelindberg what are you talking about? [zachallia]

        12:21am via Twitter

      3. California to Massachusetts in 51 hours... [zachallia]

        12:10am via Twitter

      4. @ErnNicole 5 hour energy [zachallia]

        11:35pm via Twitter

      5. @loversspit no banana scorpion bowls this time! [zachallia]

        10:25pm via Twitter

      6. @beachpizza wait .. can you get a poster board that says welcome home krystal & zach.. and wait outside our sublet for us? [zachallia]

        8:14pm via Twitter

      7. @beachpizza can you pick us up at the MA border.. we are both zombies [zachallia]

        8:14pm via Twitter

      8. tethering on iphone is awesome... goodbye unlimited plan [zachallia]

        8:12pm via Twitter

      9. Purchased RadarActive - SignalActive, Inc..

        7:18pm via iTunes

      10. New York.... Home stretch... On my 10th wind [zachallia]

        6:43pm via Twitter

      11. @itzBeans nope [zachallia]

        5:57pm via Twitter

      12. @caitlinemery yes! Come to our cookout in Gloucester next weekend.. And Joe fish house party in Andover Saturday [zachallia]

        5:13pm via Twitter

      13. 90 through NY or 86 / 88??? [zachallia]

        5:12pm via Twitter

      14. Driving would so much better if there were real life Mario kart power ups [zachallia]

        4:50pm via Twitter

      15. @caitlinemery going on 90 instead!! [zachallia]

        3:51pm via Twitter

      16. @itzBeans what????!!! [zachallia]

        3:51pm via Twitter

      17. Leftrightleftrightleft [zachallia]

        9:25am via Twitter

      18. Behind by one hour because of intense lightning storms... Can't wait for sunrise [zachallia]

        8:52am via Twitter

    7. July 23rd

      1. 6pm estimated arrival tomorrow [zachallia]

        12:54am via Twitter

      2. Still in Nebraska [zachallia]

        7:56pm via Twitter

      3. @Lemondropqt yes thank you! [zachallia]

        7:01pm via Twitter

      4. @Lemondropqt you are so unsupportive [zachallia]

        4:31pm via Twitter

      5. Utahahahahah! Time change [zachallia]

        9:13am via Twitter

    8. July 22nd

      1. Reno for gas and food [zachallia]

        2:47am via Twitter

      2. @whitedonkey I'm gonna drive so fast through those parts I won't notice [zachallia]

        12:21am via Twitter

      3. Okay, just started driving.. Someone keep track of time for us [zachallia]

        10:14pm via Twitter

      4. Movers, nap, driving [zachallia]

        6:13pm via Twitter

      5. Purchased Sainthood (Bonus Track Version) - Tegan and Sara.

        10:17am via iTunes

      Upstream

      Powered by Lifestream.



    • About Zach Allia

      Boston native, OG facebook platform developer (Free Gifts), OG iPhone developer (Tap Tap Revenge), exec producer, love javascript, dinosaurs, cats, and burritos