Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What could I say to a less technically-savvy friend about how to prevent attacks and viruses from Facebook attacks?

I have seen many of my friends accounts posting spam due to their accounts being attacked.

share|improve this question
up vote 3 down vote accepted

Some simple things to look out for:

  • Keep an eye on the address bar before posting material. If it says facebook.com or twitter.com, you'll sometimes (but not always) prevent it.

  • Upgrade your browser. Recent updates of Chrome, Safari, and IE have implemented methods to fight clickjacking. Once again, this isn't a sure way to prevent it. There are still many exploits that have yet to be fixed.

  • Install the NoScript addon if using Firefox. This also isn't a sure-proof way to stop clickjacking, but it does a pretty good job of preventing most attacks. However, installation and setup could be a hassle for a less-technical savvy internet user.

  • Watch the "mousedown" button effect. This is one of my own ideas, so I've never heard it being mentioned. I assume that during a clickjacking attack, the Tweet, Share, Post, etc. button will not change states — change from an "up" look to a "pushed down" look — when the mouse is pressed down. If the appearance doesn't change, simply move the mouse pointer away, release the mouse button, close the browser, and go back to the page. Who knows, this might save somebody.

share|improve this answer
Nice suggestions - I think the last one is especially interesting, it would be great to test it somehow. – tobeannounced Jul 20 '10 at 6:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.