Simon Willison’s Weblog

22nd December 2009 - Link Blog

New Facebook clickjacking attack in the wild. I’m not sure why Facebook don’t use frame-busting JavaScript to avoid this kind of thing. The attack is pretty crafty—a Facebook page is positioned with everything obscured bar part of the blue “share this” button, and a fake “Human Test” asks the user to find and click the blue button to continue.

Posted 22nd December 2009 at 6:52 pm

Recent articles

DeepSeek V4 - almost on the frontier, a fraction of the price - 24th April 2026
Extract PDF text in your browser with LiteParse for the web - 23rd April 2026
A pelican for GPT-5.5 via the semi-official Codex backdoor API - 23rd April 2026

This is a link post by Simon Willison, posted on 22nd December 2009.

clickjacking 11 facebook 118 phishing 54 security 598

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe