A blogger has created a proof-of-concept game that takes advantage of a class of vulnerability called clickjacking. If the website that’s hosting the game successfully clickjacks the visitor’s computer, then it can spy on the user with the user’s video cam and microphone.

The Register tested his method but they had trouble on getting it to work. They said that they had to enable their video cam in the Windows XP Device Manager and Internet Explorer.

The blogger writes, “I had doubts about publishing this, but, if I could have understand [sic] it so are the bad guys, so it’s better to know about it.”

Source: The Register