Recent content by RSnake

If Samy got arrested for XSS, which essentially did the same thing that clickjacking does (in his case - adding friends), yes, it's illegal. They'll find a way to prosecute you.

It's impossible in most cases. In others, not so much. It simply depends on what you're installing or forcing someone to accept. If you are installing something that requires a modal dialog, no, everyone above me is correct. If you're installing something that doesn't require a modal dialog...

The short answer is probably not. There are some tricky ways to neuter parts of other domains using IE8.0's anti-XSS filter, for instance. But it's noisy and only works in some browsers. So the short answer is that probably one of the only features of Facebook that's vulnerable is the...