On 9/10/07, Sven Vetsch / Disenchant <sven.vetsch@disenchant.ch> wrote:
> I wasn't able to find something written about [cross site image overlay]
FYI, this was discussed as a "Trojaned Navigation Menu" attack,
detailed on the Month of Myspace Bugs page back in April (and November
of 2006).
http://momby.livejournal.com/4250.html
Just for some historical perspective and existing research on the subject.
If the attacker has control of element positioning, he has control
over all the link targets in a document.
--
todb@planb-security.net | ICQ: 335082155 | Note: Due to Google's
privacy policy <http://tinyurl.com/5xbtl> and the United States'
policy on electronic surveillance <http://tinyurl.com/muuyl>,
please do not IM/e-mail me anything you wish to remain secret.