Cookiejacking Rosario Valotta Rosario Valotta Cookiejacking Agenda ! Me, myself and I ! The IE security zones ! IE 0-day ! Overview on UI redressing attacks ! Solving the jigsaw ! The big picture ! Demo Rosario Valotta Cookiejacking Me, myself and I ! Day time: IT professional, mobile TLC company, Rome, Italy ! Night time: web security fan since 2007, released a bunch of advisories and PoCs: ! Ndu