Home › Forums › Archives › Computer Support › Online Privacy, Safety & Security › Warning about the clipboard
- This topic has 7 replies, 4 voices, and was last updated 19 years, 12 months ago by
shergill.
-
AuthorPosts
-
September 26, 2006 at 7:22 am #25084
shergill
MemberBe careful when using ctrl+c for copy 😡
We do copy various data by ctrl+c for pasting elsewhere. This copied data is stored in clipboard and is accessible from the net by a combination of Javascripts and ASP.
Just try this:
1) Copy any text by ctrl+c
2) Click the Link:Retrieve Clipboard Text To A Web Page With Javascript – Make Sure You Do Not Allow Someone To Gather This Information, It Is An Exploit In Many Eyes
3) You will see the text you copied on the Screen which was
accessed by this web page.Do not keep sensitive data (like passwords, credit card numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information.
***********************************************
Fortunately, the fix for this is also quite simple:
1. In Internet Explorer, go to Tools -> Internet Options -> Security
2. Click on Custom Level
3. In the security settings, click to Disable the “Allow Paste Operations via Script.” That will keep your clipboard contents privateSeptember 27, 2006 at 2:12 am #152763Quiksilver
MemberI’m glad I don’t use Internet Explorer and this adds to it. What about Firerfox though? Does it do the same thing or is that automatically blocked as well?
September 27, 2006 at 10:36 am #152769shergill
MemberQuik,I do not know about firefox.if you use the firefox then try your own just copy something and click on the link given above in post,if you get the text that you have in clip board,then you have to patch it.
September 29, 2006 at 12:27 am #152766dvelez1985
Member*omit*
September 29, 2006 at 9:53 am #152765amy_d_g
ParticipantQuiksilver;208017 wrote:I’m glad I don’t use Internet Explorer and this adds to it. What about Firerfox though? Does it do the same thing or is that automatically blocked as well?From that site…
Quote:This exploit only works on Microsoft Internet Explorer (when IE security is not set to high) or Netscape explorer only when Javascript is enabled. About 70% of internet surfers may be “infected” (affected). Some firewalls (not enough brands do this yet) will block clipboard gathering (not sure what one).Another reason to be a Firefox User 😀
September 29, 2006 at 8:59 pm #152767dvelez1985
Member*omit*
September 30, 2006 at 2:32 am #152764Quiksilver
Memberdvelez1985;208203 wrote:But ummm how?I’m going to guess using the same code that the site used to find out what you had on your clipboard?
Oh and gogo Firefox =)
September 30, 2006 at 4:06 am #152768dvelez1985
Member*omit*
-
AuthorPosts
- You must be logged in to reply to this topic.