full screen flash phishing - this will really get some people
Tuesday, June 3rd, 2008When Flash Player 9 goes into full screen mode, it pops up a little security message that tells the user how to exit full screen mode. It appears as white text on a semi-transparent black background so it is generally always visible (which is good). Still, I wondered if it could be obscured.
The message is always on top, so it is impossible to draw over it. But what if we tried distracting the user from the actual security message?
Original article:
http://www.bunnyhero.org/2008/05/10/scaring-people-with-fullscreen/
Two way comminucation in Flash fscommand
Monday, May 12th, 2008Interesting thing Thom brought up today. Two way communication from with the browser in flash - control flash from javascript.
This seemed to give the answers:
http://www.moock.org/webdesign/flash/fscommand/index.html
JavaScript can send commands to Flash by invoking built-in methods on embedded movie objects. Calling Flash methods works exactly like all calls to built-in methods on JavaScript objects (eg. document.write() or window.close()). From a developer point of view, this direction of communication is one sided–JavaScript methods control a Flash movie entirely in JavaScript, without requiring complementary code in the Flash movie.