UI issues for security consideration from David Singer on 2009-12-01 (public-web-security@w3.org from December 2009)

From: David Singer <singer@apple.com>
Date: Tue, 1 Dec 2009 11:44:42 -0800
To: public-web-security@w3.org
Message-Id: <B8C2B2F0-B992-485C-A12B-25A4B58FCCBE@apple.com>

Hi

Thomas asked me to start the page on security issues at the UI (or with the interaction between UI and user).  I have typed something very brief into the Wiki at <http://www.w3.org/Security/wiki/Trusted_User_Interface>, with introductory sentences on spoofing and clickjacking.  I am sure there are other UI level security issues that should be there, and it might be good to have examples (it might be bad also - we don't want to supply a cookbook to would-be malefactors) or pointers to 'well-known' examples of previous, um, 'art'.

Have at it...

David Singer
Multimedia and Software Standards, Apple Inc.

Received on Tuesday, 1 December 2009 19:45:22 UTC