Cursor:none abuse (trick users into clicking Facebook 'like')
jack-shepherd.co.uk
Cursor:none abuse (trick users into clicking Facebook 'like')
1–10 of 69 posts
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#2Interesting. Chrome's "Under the Hood > Content Settings > Mouse Cursor" setting doesn't affect this. I would have thought it would prevent this.
Also, stuff like this is why we can't have nice things in browsers. You can't trust the internet.
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#3Odd effect. I see two mouse cursors (Mac OS X 10.7.3 + Chrome Dev Channel).
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#4I love it. It seems to work fine in Firefox, although the real cursor starts flashing when it's above the Like button.
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#5Odd effect. I see two mouse cursors (Mac OS X 10.7.3 + Chrome Dev Channel).
He mentions OS X Chrome specifically. I would quote him, but I can't cut & paste because my cursor is so messed up. ;) If you leave the window and come back in, it works better (temporarily).
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#6Odd effect. I see two mouse cursors (Mac OS X 10.7.3 + Chrome Dev Channel).
If you move the cursor outside of the Chrome window and then back in it seems to work on Chrome OSX
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#7I love it. It seems to work fine in Firefox, although the real cursor starts flashing when it's above the Like button.
In Chrome on Windows, it looks fine except when you're hovering over the button, when the real cursor suddenly appears.
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#8This is brilliant, but now it's only a matter of time until it's in actual use. Sort of like how evercookie was a clever hack meant to call attention to privacy concerns, then was put into actual production sites.
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#9I love it. It seems to work fine in Firefox, although the real cursor starts flashing when it's above the Like button.
That's because there's a transparant DIV above the Facebook iFrame, cycling on/off every few milliseconds. This is required to maintain the fake cursor's position (without it when the real cursor was over the iFrame the 'fake' cursor would stop moving).
Re: Cursor:none abuse (trick users into clicking Facebook 'like')
#10Interesting. Chrome's "Under the Hood > Content Settings > Mouse Cursor" setting doesn't affect this. I would have thought it would prevent this. Also, stuff like this is why we can't have nice things in browsers. You can't trust the internet.
Given what we've been seeing with attack sites, whether shock sites trying to just DoS the browser or silly tricks like making the browser POST to an irc server's irc port to spread the malicious URL, or just terrible ads and tracking that actively slow down the browser and ruin the surfing experience, I'm amazed that not more people see javascript as a built-in remote code execution vulnerability that only gains more and more features over time, sandbox or not. :)
Javascript makes a lot of cool stuff possible, but outside of some heavy-weight web applications that I have to trust anyway like my webmail interface or online storage manager, or games where the interactive components are the only reason why I'm visiting the site to begin with, I'm starting to wonder whether trusting the internet is not inviting more trouble than it's worth.
Maybe I'm "old-fashioned" but I'd love to go back to all the sites I visit functioning with just static web content, no clientside scripting at all, and letting me consume videos and stuff in a trusted media player plugin.