Security in October: Google Wave, Facebook, XSS
Paul Gilzow,
.eduGuru,
Oct 30, 2009
This is the sort of thing that makes it so hard to get communications applications right. "A North Carolina State University report from September 2008 showed that users clicked the 'ok' button on message alerts 61% of the time, regardless of whether the message alert was legitimate or not. From that I concluded that we could be reasonably certain that, as an attacker, we would have a 1 in 2 shot of tricking a victim into clicking an exploited link via email, IM, twitter, etc."
Today: 2 Total: 7 [Direct link] [Share]
