Collected research

Pure Java™, Pure Evil™ Popups

ma1 · hackademix.net

ma1 (Giorgio Maone) shows a Java applet can open a full-screen window with no chrome, no close button and no way to move or minimise it - popup blockers cannot stop it, and it can paint a fake browser or whole fake desktop for phishing. Sun first filed the report as an enhancement request, then reclassified it; fixed October 2007.

Record

Researcher

ma1

Published by

hackademix.net

Topic

Server

In the archive

• Collected in the 2007 research round

Tags

• java
• phishing
• ui-redress
• url-spoofing
• abuse-of-functionality
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of ma1, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.