GUYA.NET » Games

Malicious camera spying using ClickJacking

guya — Tue, 07 Oct 2008 06:09:09 +0000

Update: Adobe has fixed this issue by framebusting the Settings Manager pages. Now, 99.9% of the users are protected from this specific exploit. Congrats on the fast response. —-

Turn every browser into a surveillance zombie. The wet dream of every private eye and peeping tom. Imagine this scenario, you play a short game on the web and by doing that you unknowingly grant someone full access to your webcam and microphone.

I’ve made a live demo of it in here, this demo won’t listen or record any of your input.

If you don’t want to try it or don’t have a webcam connected, then check out the video.

[kml_flashembed movie="http://www.youtube.com/v/gxyLbpldmuU" width="450" height="376" /]

When I’ve first heard about ClickJacking and how Adobe is concerned about it, I thought that the Flash Player Security Dialog must have been compromised. But the Security Dialog does a good job disabling itself when you try to mess with it’s visibility through DHTML. Unless there’s some 0-day issue with the Dialog it’s probably relatively safe.

The problem here is the Flash Player Setting Manager, this inheritance from Macromedia might be the Flash Player security Achilles heel.

I’ve written a quick and dirty Javascript game that exploit just that, and demonstrate how an attacker can get a hold of the user’s camera and microphone. This can be used, for example, with platform like ustream, justin and alike or to stream to a private server to create a malicious surveillance platform.

I’ve made it as a JS game to make it easier to understand, but, bear in mind that every Flash, Java, SilverLight, DHTML game or application can be used to achieve the same thing.

Some of the clicks are real game clicks other are jacked clicks. Every time the click is needed to be jacked the content simply move behind the iframe using z-index

I had doubts about publishing this, but, if I could have understand it so are the bad guys, so it’s better to know about it.

In this case Adobe could have just framebust the pages that holds the Settings Manager. There are two issues with frambusting in this case, it won’t solve all cases (legacy browsers for ex) and will force Adobe to rely on javascript.

Play it here, watch it here

Reliving your childhood through every browser

guya — Tue, 19 Aug 2008 14:33:04 +0000

This is what fMAME is all about, it’s a MAME (Arcade Games Emulator) written in Flash that is running in every browser with no installation. I get enthusiastic remarks like “Wow I used to play this on the arcade” from most of the people I’ve sent the link to. For now, there’s no sound and only a handful of games are supported, but, it’ll surly improve in the future.

Of course I could have sent them the info of how to download and run the desktop MAME emulator and how to find roms for it. It’ll give them the same experience of traveling back in time. But, how many will bother to do that? Yes it’s simple but the common users want it to be very simple. They don’t want to be bothered with downloads and installation they want to follow a link and start the experience.

The second thing I hear from the people I’ve sent this link to, is, “how did they do that?!” then I need to explain that Flash isn’t just for Ajax like website it’s a complete platform that is only (mainly) stoppable by the creators imagination.

Did I mention it runs in every browser?!

Play fMAME

RIA on the mobile phones and small devices

guya — Mon, 31 Mar 2008 14:00:49 +0000

Flash, SilverLight, Android, JavaFX, QT and the iPhone. Seems that everyone wants to redefine our mobile phone, the ultimate device/gadget of all time. I’ve written a summary of the latest advancement in the area of rich mobile applications.

Read it here.

Fun to play Flash Lite games at a mobile near you

guya — Sat, 01 Mar 2008 02:24:20 +0000

Playyoo is about bringing the game experience we became used to get inside our browser, into our mobile devices. Simply direct your mobile phone to m.playyoo.com, to get instant fun. No need for any installations, no need to go through boring textual catalogs of games. All you need is a Flash Lite supported device, no matter which version.

Lately the playyoo game catalog grew considerably, since they opened their beta with only 13 Flash-Light games. The grew came partially because of the game creation contest that was recently closed, and the winners were announced today.

The wining game is Match the Blocks, an extremely simple and fun to play game that is very well suited to be played inside a mobile phone. The game is written in the widely supported Flash Lite 1.1, so it’s likely to be pre-installed on your device.

A beautiful Flash website by Microsoft

guya — Sun, 06 May 2007 10:11:34 +0000

Designed like a game website, this new Microsoft website shows a nice use of the Flash technology. It got it all, from Flash Video to scripted animation, sound and transitions.
check it out…

Valve was hacked again

guya — Thu, 19 Apr 2007 23:04:20 +0000

Valve, the maker of two of the best games of all time, Half-Life 2 and 1, was already hacked once in 2003. The source code of it’s highly anticipated and in-development game, Half-Life 2, was stolen and was then available for everyone on the web. Playable version started to emerge, and the company had to postpone the release for months, which cost them a lot of money and pain. You might have thought that they learned from the experience, but it seems that they might have been hacked again. This time no source code for you to peek in “only” sensitive data like users credit card numbers was stolen.

Relive your childhood by playing your favorite DOS games

guya — Tue, 27 Mar 2007 00:48:34 +0000

JPC is an x86 PC emulator written in Java. It’s an impressive piece of software developed by some uber geeks, but it’s most exciting Side Effect, as they call it, is that it enable you to “Relive your childhood by playing your favorite DOS games”. They have a demo running on their web site that let you play some nostalgic DOS games. These are the exact original games and not clones. Playing these games and starting them from the DOS prompt really feel like traveling back in time, the only thing that is missing to complete the experience is the sound of the loading diskette drive.

Commander Keen 1

Somehow this screen felt very nostalgic

Prince of Persia

Since it’s pure Java it can theoretically run on any Java enabled machine even on a mobile phone.

Play JPC…

When Lego meets GTA

guya — Sun, 19 Nov 2006 16:09:16 +0000

Forget about these cheesy Star-Wars Lego games. Imagine how a GTA Lego game would look like. This is how:

Download Grand Theft Auto – Lego City

The guys from brickflick.com are creating scenes from famous video games using real lego blocks and stop-motion animation.

Finally a good use for my wacom

guya — Tue, 14 Nov 2006 15:34:12 +0000

Scribble is a simple, fun and original drawing flash game. It’s tons of fun playing the game with a wacom tablet.
Play Scribble

Tired of Ricki Lake?

guya — Sun, 17 Sep 2006 09:52:51 +0000

Mr Paul Neave is not the next trash-TV host, he is a “serial Flash fettler and interactive designer”, or at least thats what he calls himself. He is a Flash experimentalist who creates fun and usefull Flash experiences. Few years back it was some high quality open source flash games, an improved version can be found here, sadly the source is not availble anymore. Then came the flash planetarium a cool and accurate way to examine the stars from within the browser. Last year it was flashearth which need no introduction.
And now, his latest experiment is neave.tv a cool replacement for your television. Based on video services like youtube and google video, the improvment is that you can lean back and enjoy the show in full sceen and without the need for you to do anything. Which mean you can be a couch potato again, only this time the shows are in much higher quality
check it out, neave.tv