Paulos Yibelo

Paulos Yibelo is a security researcher and blogger who publishes practical analysis of emerging web and browser vulnerabilities. His official blog, powered by Blogger, explores how attacks work, the risks they create, and potential ways to defend against them. A featured article introduces DoubleClickjacking, a UI-redressing technique that exploits the timing of a double-click to bypass protections such as X-Frame-Options, Content Security Policy frame-ancestors, and SameSite cookies.

The post explains how attackers may manipulate browser windows to trick users into authorizing applications or changing account settings, and discusses possible effects on websites, browser extensions, and mobile devices. It also provides proof-of-concept code, examples involving major platforms, and a client-side mitigation that keeps sensitive buttons disabled until a user demonstrates intentional interaction. The blog’s content is aimed at readers interested in application security, vulnerability research, and responsible defense.

Rather than offering commercial products or services, Yibelo shares technical findings, demonstrations, and mitigation guidance to help developers and security professionals understand and address evolving attack techniques