3 ms·
Impressive work which I could definitely foresee being used by malicious code to seamlessly hijack existing GUIs. The security implications are spine-chilling.
by obiefernandez 17y ago
Impressive work which I could definitely foresee being used by malicious code to seamlessly hijack existing GUIs. The security implications are spine-chilling.
- cubicle67 17y agoYes. I like that the first example was an OSX password dialog. I'm sure there's no potential for misuse of this feature...
- yangyang 17y agoI'm quite sure that malicous code has been written to do similar things already. I think what they've done with the technique is of interest here, not the technique (reading pixels from the screen and intercepting the mouse / keyboard).
- fhars 17y agoIt is the default method to scrape on-screen keyboards meant to prevent phishing attacs.
- Qz 17y agoNothing that can't be done already, assuming the attacker can run code on your computer, in which case, controlling where you're trying to point the mouse is the least of your problems.