WebApp Sec: Interview With Jeremiah Grossman on ClickJacking attack

[bugtraq () cgisecurity net]

I've just published an interview with Jeremiah grossman on ClickJacking.  
Looks as though CSRF token based protections may not be as safe as we thought... 
 
Interview: Jeremiah Grossman provides more details on clickjacking attack
http://www.cgisecurity.org/2008/10/interview-jerem.html

Regards,
- Robert
http://www.cgisecurity.com/


-------------------------------------------------------------------------
Sponsored by: Watchfire 
Methodologies & Tools for Web Application Security Assessment 
With the rapid rise in the number and types of security threats, web application security assessments should be 
considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
can accelerate the assessment process? Download this Whitepaper today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------