Security Experts Fear IFrames on Facebook Pages Could Spell Trouble


Recommended Posts

Security Experts Fear IFrames on Facebook Pages Could Spell Trouble

On Thursday, Facebook announced that Page admins can start creating Page Tabs which load apps inside iframes instead of the more restrictive FBML (Facebook Markup Language).

"[...] You can now build apps that run across Facebook (including Pages and Canvas applications) using the same simple, standards-based web programming model (HTML, JavaScript, and CSS)," Facebook's Nikolay Valtchanov said.

However, while Facebook developers were happy to hear about the changes, some security experts didn't share the enthusiasm.

"While this is no doubt great news for legitimate developers it will undoubtedly make life for those with malicious intent much easier too," notes Rik Ferguson, senior security advisor at antivirus vendor Trend Micro.

"No more likejacking required, no more having to persuade users to install your app, if a criminal can make the bait sweet enough just to get you to visit the page, that is all they will require to start the chain that leads to your computer being compromised and used for criminal purposes," he explains.

Story here: http://news.softpedia.com/news/Security-Experts-Fear-IFrames-on-Facebook-Pages-Could-Spell-Trouble-183981.shtml
Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...