Tricking Johnny into Granting Web Permissions

We studied the web permission API dialog box in popular mobile and desktop browsers, and found that it typically lacks measures to protect users from unwittingly granting web permission when clicking too fast. We developed a game that exploits this issue, and tricks users into granting webcam permission. We conducted three experiments, each with 40 different participants, on both desktop and mobile browsers. The results indicate that in the absence of a prevention mechanism, we achieve a considerably high success rate in tricking 95 respectively. Interestingly, we also tricked 47 browser where a prevention mechanism exists.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
01/22/2021

Impact of Response Latency on User Behaviour in Mobile Web Search

Traditionally, the efficiency and effectiveness of search systems have b...
research
06/04/2019

An End-User Development approach for Mobile Web Augmentation

The trend towards mobile devices usage has put more than ever the Web as...
research
02/10/2023

Composable Ledgers for Distributed Synchronic Web Archiving

The Synchronic Web is a highly scalable notary infrastructure that provi...
research
05/12/2023

Do RESTful API Design Rules Have an Impact on the Understandability of Web APIs? A Web-Based Experiment with API Descriptions

Context: Web APIs are one of the most used ways to expose application fu...
research
08/11/2020

PlugSonic: a web- and mobile-based platform for binaural audio and sonic narratives

PlugSonic is a suite of web- and mobile-based applications for the curat...
research
05/17/2021

Analysis for the Overwhelming Success of the Web Compared to Microcosm and Hyper-G Systems

Microcosm, Hyper-G, and the Web were developed and released after 1989. ...
research
11/10/2021

Nation-wide Mood: Large-scale Estimation of People's Mood from Web Search Query and Mobile Sensor Data

The ability to estimate the current affective statuses of web users has ...

Please sign up or login with your details

Forgot password? Click here to reset