 Security Issue With Ctrl+c/copy On Clipboard |
|
|
|
|
  |
 Sep 8 2005, 06:29 AM
Post
#1
|
|
|
Super Member  Group: Members Posts: 351 Joined: 19-October 04 From: India Member No.: 1,824  |
hi friends,
We all copy various data by using ctrl+c/Copy for pasting elsewhere. This copied data is stored on clipboard and is accessible over the net by a combination of Javascripts and ASP. Just try this: 1) Copy any text by ctrl+c 2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm 3) You will see the text you copied on the Screen which was accessed by this web page. Moral: Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it. To Avoid This To avoid this, follow these steps: 1. Go to internet options->security 2. Press custom level 3. In the security settings, select disable under Allow paste operations via script. Now the contents of your clipboard are safe. Pass this information on to create an awareness of the same. Safe Browsing, Cheers. |
 |
 
|
|
Sep 8 2005, 06:42 AM
Post
#2
|
|
|
Member [Level 2] Group: Members Posts: 80 Joined: 8-September 05 From: Australia Member No.: 11,616 |
Wow! Thanks for the tip. Very useful information you posted. I never really put any of my passwords or personal information on clipboard, but this tip may actually help if I do. Thanks, once again.
|
|
|
|
|
Sep 8 2005, 09:42 AM
Post
#3
|
|
|
Mankie Group: Members Posts: 762 Joined: 22-July 05 From: New Delhi, India Member No.: 9,746 |
Yeah this is certainly a great tip!
I used to copy and paste my passwords but now i am not going to that anymore. thanks again buddy! |
|
|
|
|
Sep 8 2005, 11:06 AM
Post
#4
|
|
|
The Bogey Princess Group: Members Posts: 639 Joined: 25-April 05 Member No.: 6,138 |
Weird, it doesn't work on Firefox (well, for me) and the last thing I copied wasn't right when I viewed it on IE. Anyway, thanks for the tip. That's something that people will want to bear in mind, considering that it's an overlooked feature and all. We usually trust the innocent Ctrl+C that we don't know about the flaw it has. Sigh... why does it have something to do with Javascript and the like?
 It's so annoying...
|
|
|
|
|
Sep 8 2005, 11:27 AM
Post
#5
|
|
|
Member [Level 3] Group: Members Posts: 94 Joined: 2-January 05 From: Dotian.com Member No.: 3,085 |
It can be done by just using Javascript. The ASP (or PHP) can be used to store this information to any database.
Most important thing: It only Works with Internet Explorer and Netscape. So get a real browser, Get Firefix [http://www.mozilla.org/products/firefox/] . |
|
|
|
|
Sep 9 2005, 12:09 AM
Post
#6
|
|
|
Super Member Group: Members Posts: 362 Joined: 25-August 05 Member No.: 11,104 |
FireFox*
well then i dont have to worry aobut it? i run in a firefox browser :/ |
|
|
|
|
Sep 9 2005, 01:03 AM
Post
#7
|
|
|
Newbie [Level 2] Group: Members Posts: 37 Joined: 28-August 05 Member No.: 11,210 |
Whoa, I never knew that..... Thanks for sharing!
|
|
|
|
|
Sep 9 2005, 02:47 AM
Post
#8
|
|
|
Advanced Member Group: Members Posts: 126 Joined: 22-June 05 Member No.: 8,535 |
QUOTE(cse-icons @ Sep 8 2005, 03:29 PM) Just try this: 1) Copy any text by ctrl+c 2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm 3) You will see the text you copied on the Screen which was accessed by this web page. Moral: Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it. That was a nice tips to me, but not all copied data can be retrieve by this website like wat you have said password, if the text you copied is encrypted it will not be able to get the data. although those data that can be read with your naked eyes can be retrieved. anyway to make sure that your data is safe, follow the instruction that cse-icons posted 
|
|
|
|
|
Sep 9 2005, 08:21 AM
Post
#9
|
|
|
Advanced Member Group: Members Posts: 107 Joined: 9-September 05 From: Houston, TX USA Member No.: 11,651 |
Wow, yet another reason to love and use Firefox. I copy and paste my passwords all the time because I can never remember them. Great tip! It's scary to imagine all the people out there (90% of market, right?) that could be surfing with their clipboards easily viewable by malicious web sites.
|
|
|