3 ms·
It would be helpful if this post included mentions or links to any best practices to help mitigate this. Does anyone have any they would like to share?
by ensignavenger 10y ago
It would be helpful if this post included mentions or links to any best practices to help mitigate this. Does anyone have any they would like to share?
- dsr_ 10y agoHere's one: don't use the default window manager theme. This is much easier on Linux and *BSD than in Windows or MacOS. I've seen lots of picture-in-picture attacks. They usually simulate Windows title bars and controls. Hah. I once saw one on a Mac which adapted to the OS and tried to show a Mac window frame, but it was an outdated version. That brings me to another point: send an incorrect User-Agent. Same browser on a different OS, perhaps.
- userbinator 10y agoIt used to be pretty easy to customise appearance on Windows, but the latest versions seem to have mostly castrated that functionality.
- slobotron 10y agoWould you say that castrating window decorations was a misguided attempt by Microsoft to make Windows more like eunuchs? (I'll let myself out)