Ukugcina iliso ngaphandle kwesitha esingabonakaliyo.
Abakwazi ukubonwa, abakwazi ukuqiqa kunye nabo, kwaye bafuna ukukhangela ukuchofoza. Inkqakraza sele ijikeleze ukususela ngowama-2008 kodwa bafumana uninzi ngokuphrinta ngokukhawuleza ngokusuka kuhlaselo olutsha lwe-Clickjacking ukuhlaselwa kwabasebenzisi be-Facebook.
Yintoni Cockjacking?
Ukuqakraza kunokuzwakala njengento yokudanisa engaphantsi komhlaba, kodwa kukude nayo. Clickjacking yenzeka xa umculi wekratshi okanye omnye umntu ongekho emtshini we-intanethi ebeka iqhosha elingabonakaliyo okanye enye indawo yomsebenzisi wesibonakaliso ngaphezu kweqhosha lephepha lewebhu elibonakala limsulwa okanye i-interface ebonakalayo usebenzisa ubume obungabonakaliyo (ongaboniyo).
Ikhasi lewebhu elingenacala lingenayo iqhosha elithi: "Cofa apha ukuze ubone ividiyo ye-kitty fluyy cute and adorable", kodwa efihliweyo phezulu kwinqakraza ibinki engabonakaliyo eyona nxu lumene nento ongayi kuyenza Ngenye indlela ufuna ukucofa, njengengqakraza ethi:
- Amaqhinga ukuba utshintshe izicwangciso zobumfihlo kwiakhawunti yakho ye-Facebook
- Amaqhinga ukuba "uyayithanda" into ongeke uyithande (aka Likejacking)
- Amaqhinga okuzongeza ngokwakho njengomlandeli we-Twitter kumntu ongafanelanga
- Ukucwangcisa ukuba wenze into ekhompyutheni yakho (njengemakrofoni okanye ikhamera)
- Ukucwangcisa ukuba ungene kwiholo elinyeneyo kunye nokumemeza "Shih Tzu" phezulu kwimiphophu yakho. (ok, ewe, ndongeze lo wokugqibela nje ukuba ndibone ukuba ngaba uqhubeka unika ingqalelo).
Amaxesha amaninzi iKhockjacker izakulayisha i-website esemthethweni kwisakhelo kwaye iguqulwe amaqhosha abo angabonakali phezulu kwendawo yangempela.
Ungayithintela njani ukukhangela kwakho ngokuChoxiswa?
1. Hlaziya isiphequluli sakho se-intanethi kunye ne-plug-ins njenge-Flash
Ukuba awuzange uyihlaziye isiphequluli sakho ukuya kutshanje kwaye ininzi inguqu ekhoyo, ngoko awukho nje ukulahleka ekuphuculeni oku kunokukukhusela ukuba ufikelele kwiChockjacked, kodwa awunakuthatyathwa kwezinye izibuyekezo zokukhuseleko eziyingxenye iinguqulelo ezintsha ze-Firefox, IE, i-Chrome kunye nezinye izikhangeli ze-intanethi. Hlaziya umshicileli wakho ukuya kutshintshi yolwazi olutsha olukhoyo. Kwakhona ingcinga efanelekileyo ukujonga ukuba kukho i-version-up-to-date version yesiphequluli sakho kunokuba ufake njengamanje.
Kufuneka uphinde ubuyekeze iiplagi-fowuni njengeSkrini kuba ezinye iinguqulelo ezidala zingasengozini yokuhlaselwa kweClickjacking. Ukuhlaziya iiplagi-fayile zesiphequluli, tyelela iwebhusayithi ye-plug-in maker kwaye ukhupha i-version yangoku. Umzekelo, ukuhlaziya i-flash ye-Adobe Flash site.
Ukufumana ulwazi olungakumbi malunga nendlela yokugcina ikhompyutha yakho ngokukhawuleza, khangela iqaku lethu: Indlela yokuqhubeka neNgcaciso yokuKhuselwa kweNqakrazo kunye neepatches
Nazi ezinye iinqununu ezinxulumene nokukhusela okukhuselekileyo:
2. Khuphela kwiChockjacking Detection / Prevention Software
Nangona ezinye izikhangeli ze-Intanethi zinikezela ngokukhuseleka okukhuseleyo kwiKhowudi yokukhusela, kukho iinkcukacha ezininzi zokuqaphela / ukukhusela i-plug-ins eziqinileyo ezifumaneka kwiziphequluli ezifana ne-Firefox. Zininzi zazo zikhululekile. Nazi iibini ezithe zaziwa kakhulu kwaye ziyahlonishwa:
- I-NoScript - I-free (umrhumo-mali) wokunqakraza i-plug-in ye-Firefox.
- I-Comitari yeWebhu yeNkxaso-yeKhaya yaseKhaya (uLuhlu olulinganiselwe) - Inguqu ekhompyutheni ye-Comit Web Protection Suite. I-LE version iquka iimpawu zokukhusela i-Clickjacking.
Inkcazo yokukhusela ayikho kuphela uxanduva lomsebenzisi. I-intanethi kunye nabaphuhlisi bezicelo zewebhu nabo banendima ekuthintela umxholo wabo ukuba uqhutyelwe yiChockjackers
Ngemfundo engcono kubasebenzisi kwiengozi zeChockjacking, indlela yokubona ukuhlaselwa, kunye nento oyenzayo malunga nabo, kunye nokuxhaswa kwabasebenzisi bewebhu kunye nabasebenzisi bewebhu ekukhuseleni ukukhusela i-Clickjacking, mhlawumbi ihlabathi liya kuba likhululekile leChopperjackers ngolunye usuku.