ashiezai
Sep 12 2005, 01:02 PM
| | wow ... i didnt know that copying my text to to clipboard with ctrl+c will render my computer insecure .... thanks for the information man ... i will try not to copy my passwaord anymore ... I will pass this message to my friends ... thanks again ... |
Reply
cse-icons
Sep 12 2005, 01:11 PM
hi mendezgarcia, thanks for ur analysis and points. I myself have not worked much on Javascript. For one thing it may not just be password, but even Credit card information or n number of things. Agree that the hacker must know the website the password is for and the username, but I know a few of my friends who store all this login info ie., website, username and password in a file on their system(since they do not remember all the passwords). Anything might happen by accident. Favoring ur point: Yeah but the chances that a site might just keep on trying to guess are less than 1 in a million. Moreover IE is not the browser that everyone uses. I believe in being careful than regretting later... Since the solution of just switching off the option will not effect the browsing experince of the user in any way. Even if not as a security measure.. this info wud be useful just for awareness. Cheers.
Reply
heavensounds
Sep 12 2005, 02:17 PM
Thank you very much for the tip...I have just protected myself  Greetz
Reply
crapoartworks
Sep 12 2005, 02:49 PM
Now for me, I only know bits of javascript like CODE javascript:window.close(); and CODE javascript:history.go(-1); but what you posted above looks very scary. I hate to think if something was logging my clipboard.....
Reply
bluhapp
Sep 12 2005, 03:00 PM
me uses firefox. so no ctrl+C probs.. i uses a lot. i mean alot of ctrl + c... thanks to firefox.. great security..
Reply
Dooga
Sep 12 2005, 03:41 PM
Sometimes, the control C javascript is very usefull, for example, when you press "highlight this" or maybe using the clipboard for something like replacing "variables" etc.
Reply
mendezgarcia
Sep 12 2005, 08:00 PM
QUOTE Suppose, You've your letter copied on clipboard and some evil site steals it.
I think it is also possible that using JavaScript a webpage may transfer selected text to the clipboard. And then using other methods of clipboard object a site may capture some personal data. The quoted text above was sent by Sunny using PM, but I thought it would be interesting to talk about it. Well, yes it IS possible to "transfer" selected text to JS and then send it to an "evil site" or whatever. But this would be a little more complicated thing to do. I'll post a method; there may be others, but they would follow the same structure. The "exploiter" would have to create a site and trick you to visit it. This site would have 2 frames or iframes; one of them showing the site he wants to "steal" and the other (invisible) actually logging, using setTimeout to regularly copy and send the content. But I think most of you know about phishing sites (what could be used as well, and it's even simpler) and wouldn't do something like this. Would you? About capturing personal data, I don't know what you consider "personal data", but Javascript can't touch any files in your computer , except the infamous cookies. But usually the browsers are disallow JS to access cookies from other sites.
Reply
SystemWisdom
Sep 13 2005, 12:15 AM
My main purpose for me with this little bit of code (sorry if my last post mislead any of you, hope not) in my opinion, is to display that info on my site for my visitors, with an explanation of what it is, and how to prevent it.. I am personally not too concerned about the exploit for many reasons, many of which have already been discussed, but the main reason it doesn't bother me, is because I don't use CCs on my computer and passwords are only half of the key into any site.. Anyway, my interest is in displaying this info to users, similar to how many sites display the users IP address.. I may even add this handy little code bit to my Dynamic Signature!!  Again, thx for posting it! Ima have fun with it!! lol
Reply
sinx
Sep 13 2005, 09:19 PM
QUOTE(cse-icons @ Sep 8 2005, 07:29 AM) hi friends, We all copy various data by using ctrl+c/Copy for pasting elsewhere. This copied data is stored on clipboard and is accessible over the net by a combination of Javascripts and ASP. Just try this: 1) Copy any text by ctrl+c 2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm 3) You will see the text you copied on the Screen which was accessed by this web page. Moral: Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it. To Avoid This To avoid this, follow these steps: 1. Go to internet options->security 2. Press custom level 3. In the security settings, select disable under Allow paste operations via script. Now the contents of your clipboard are safe. Pass this information on to create an awareness of the same. Safe Browsing, Cheers.  LoL Nice idea to make some sites ....  damn dude never knew this was possible thx !!!!!!!! I am adjusting it at this moment hile !!!!!
Reply
shadowdemon
Sep 13 2005, 11:47 PM
QUOTE(cse-icons @ Sep 8 2005, 02:29 AM) hi friends, We all copy various data by using ctrl+c/Copy for pasting elsewhere. This copied data is stored on clipboard and is accessible over the net by a combination of Javascripts and ASP. Just try this: 1) Copy any text by ctrl+c 2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm 3) You will see the text you copied on the Screen which was accessed by this web page. Moral: Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it. To Avoid This To avoid this, follow these steps: 1. Go to internet options->security 2. Press custom level 3. In the security settings, select disable under Allow paste operations via script. Now the contents of your clipboard are safe. Pass this information on to create an awareness of the same. Safe Browsing, Cheers. i need to learn that code
Reply
Recent Queries:--
how do i stop copying text from ctrl c - 18.93 hr back. (1)
-
var content=clipboarddata.getdata("text"); - 23.06 hr back. (1)
-
javascript ctrl-c - 50.87 hr back. (2)
-
disable ctrl c copy using javascript - 51.54 hr back. (1)
-
control c does not copy - 60.35 hr back. (1)
-
clipboard ctrl c windows xp - 68.08 hr back. (2)
-
how to find ctrl c copy - 80.68 hr back. (1)
-
vista slow copy clipboard - 95.26 hr back. (1)
-
copy any text by ctrl c - 162.88 hr back. (1)
-
copy ctrl javascript - 175.38 hr back. (1)
-
windows copy paste security hole - 175.41 hr back. (1)
-
javascript ctrl c - 188.30 hr back. (1)
-
how to copy to clipboard without ctrl c - 196.99 hr back. (1)
-
ctrl c javascript - 197.18 hr back. (1)
Similar Topics
Keywords : security, issue, ctrl, c, copy, clipboard
- Is Symantec Really The Best In Security ?
(8)
[ Aef ] Security Update For Aef Forum Software
Highly recommended (1) For the benefit of any or all AEF Forum Software users, there has been a Security Issue found in the
BBcode handling of the software. A Patch file is available and it is as simple as uploading a
replacement file to overwrite an existing file in the Install. File download and further
details are available here . The Update is highly recommended since the vulnerability is
now public and no telling what mischief could result on your Forums. ....
Another New Exploit And One A Few Weeks Ago, We Are All At Risk From These
A DNS exploit and a clipboard expload believe it or not! (0) Just browsing the news and came across this article:
http://news.bbc.co.uk/1/hi/technology/7567889.stm It is a new exploit based on your computers
clipboard. Basically the hacker creates a flash file, usually a banner ad which has some specific
code in it. This code empties your clipboard of anything you have copied and then inserts a weblink
in there to a malicious download posing as anti virus software. So next time you copy some text and
paste it into a forum or chat box or something the flash file, which is now stored within your
firefox process or in the firefox ....
White Paper: Security Threat Report: 2008
(0) I saw this white paper and I thought I bring down some interesting information that has come from
2007 and leading into 2008. I have to say though that the information on this white paper is pretty
darn mind blowing as I bounce some facts to everyone. Of course since I been getting into this
since last year it is not all that surprising since I posted many topics about it as well.
-Sophos currently sees 6,000 new infected webpages each day -One infected page every 14 seconds
-Only about 1 in 5 of these sites is a hacker site -83 percent are hacked sites, or legitima....
Security Warning 2008: Top 11 Malware Threats To Watch Out For
(0) Before I go into this topic I have to say, stop making up these crazy names. I know I just getting
into the security side of things but still as long as there are computer problems and ways to sucker
someone into downloading the stuff, the crazy names will still live on. QUOTE Lieware
ADVERTISEMENT In 2007, there was a lot of "rogue anti-virus software," which is sometimes also
referred to as "fake anti-virus software." But these terms are confusing because there's too
much negation going on. Fake anti-virus software is not anti-virus software at all. So what ....
New Security Hole Discovered In Excel
(0) Well I have to same I am bit surprise on this security flaw especially what it can do; in which all
a user has to do is open a malicious Excel document and it allows the hackers to execute remote code
on to your system. As far as how wide spread this vulnerability is, it hits every excel software
from Excel 2000 to Excel 2003 SP2, and it also includes the Mac Version of Excel 2004 as well. OF
course with the disappointment of Office 2007 by some people will still be running the 2003 versions
on their computers. Right now the attacks are minimal and the question for t ....
Security Commom Sense
(0) A very good article titled "Security Common Sense" in gnucitizen.org Below is the link to that
article http://www.gnucitizen.org/blog/security-common-sense Website Link
http://www.gnucitizen.org "We basically train a bunch of monkeys to click the yes button for
every security warning." Don't you think many of us fall under the category? because most of
the time we do not see what the dialog says, but press Yes, which might not treat you well
sometimes... A good read.....
Symantec's Top 10 Internet Security Trends Of 2007
(3) Well I saw this article and after reading it all just to find the top 10 security problems I thought
I share them and give my thoughts about them. I know I know its horrible but what can I say, its me
/laugh.gif" style="vertical-align:middle" emoid=":lol:" border="0" alt="laugh.gif" />. 1.) Data
Breaches For the most part I am not surprise especially the big stories of 2007 which include the
TJ Max breach of 45 million credit/debit cards; I believe that has been the biggest hack job ever in
terms of stolen cards and id theft (somewhat). Oh lets not forget the al....
Security Guidelines For Internet Users
(6) Security Guidelines for Internet Users 1. Install an anti-virus software, you can free ones like
AVG Free . Ensure that it's regularly updated - this is of the utmost importance. 2.
Anti-virus software is not enough, the security can be tightened using a firewall software which
will help you prevent unauthorized incoming and outgoing communications from your computer while
connected to the Internet. 3. Disconnect your computer from the Internet when not in use. The
longer you are connected to the Internet, the more opportunity you give for persons to gain un....
Php Security Vulnerability - Beware From Spammers
If you notice your site becoming really slow, you may be a victim (1) QUOTE PHP Security If you are using PHP on your website we ask that you please read the
following carefully. We have noticed a significant number of PHP websites are being compromised
due to vulnerable PHP code. Spammers are scanning millions of websites on the Internet looking for
PHP scripts that can be exploited to send spam. When they find a script that has a loophole they
send thousands of email messages through the script, often taking down the website or severely
impacting website performance. Generally these loopholes exploit code using paramet....
Brand New Security Holes Found And Patch On This Month Updates And Office Exploits
(0) Even though the fiasco with the .ANI exploit is still going strong microsoft released it's month
updates this time they found 4 more critical breaches in it's systems (XP), most people should
have gotten the update pop up screen yesterday. So here is the info on these critical flaws.
http://go.microsoft.com/fwlink/?LinkId=84687 http://go.microsoft.com/fwlink/?LinkId=85130
http://go.microsoft.com/fwlink/?LinkID=85163 http://go.microsoft.com/fwlink/?LinkID=85164
http://go.microsoft.com/fwlink/?LinkId=80251 I don't know how reliable vista will be af....
Security Firm Kaspersky Lab Creates Ipod Virus
(1) With the flood of news coming about the .ani exploits it seems the tech world is recieve more news
about new hacks, viruses and other bad stuff these days. Today Kaspersky Lab created a virus that
is able to affect the Ipod, however, it is only affecting Ipod's that have linux installed and
not the standard OS that comes with Ipod. The virus goes by the name of Podloso, although they say
it doesn't show a current threat this virus does show the possiblity to install malware into
devices such as the Ipod. They also mention that the virus does not copy it self....
Major Flaw In .ani File Found In Windows 98 Through Vista Creates Major Security Risk
Vista Aint that Secure at all (9) I was able to browse around this and found it interesting since this vunerability is found in 4
Microsoft Operating Sytems, Windows 2000, Windows XP, Windows Vista, Windows 2003 Server. From the
article Microsoft stated that their is a hole in the .ani files, which happen to be related tothe
mouse cursor, when the mouse icon changes depending on what you do. They only mention that with
this flaw it always hackers to break into someone computer and do their thing. But in another
article relating to this attack it was mention that in order for this to happen a user has ....
Cpanel Exploit
security hole in cPanel to hack the servers of a hosting company (8) A pair days ago I read this new on Slashdot: cPanel Exploit Used to Circulate IE Exploit
QUOTE "In a dangerous combination of unpatched exploits, hackers have used a previously
undiscovered security hole in cPanel to hack the servers of a hosting company and use hundreds of
hijacked sites to infect Internet Explorer users with malware using the unpatched VML exploit.
cPanel, whose hosting automation software is used by many large hosting companies, has issued a fix.
It's a local exploit, meaning the attacker must control a cPanel account on the target hosti....
A Very Simple Security Tip
for Windows 2000/XP (13) We all know the difference between a limited user and an administrator user under Win2k/XP - you
can't/can install major software, perform system maintainence, and other stuff. But using a
limited user on a day-to-day basis also provides you with decent protection from a bunch of threats:
if the malware is running under your limited-rights user, it can only do as much as you can. For
instance, a limited rights user can't edit the HKLM hive of the Registry, so any malware running
under the same user won't be able to touch that area. It's extremely simple t....
Rootkits
the security threats that no one's heard of (2) a security threat to be concerned with is the increasing prevalence of viruses containing advanced
rootkits to hide their actions or data on the computer. even from the anti-stuff tools. a
rootkit was originally a name for tools that hackers/crackers would use to maintain root on
unix/linux machines. root is the uber user with all the permissions on a linux box. on windows
these tools can be used to hide data on the harddrive and in the registry by manipulating the way
the data is stored. THe windows api(the thing windows uses to communicate to the hardware) read....
Security Not Safe
(2) Hi everyone!!!!!!! This is the last one!! /tongue.gif" style="vertical-align:middle" emoid=":P"
border="0" alt="tongue.gif" /> Ok guys, I heard somewhere that if we protect some page with
password, it is steel not safe at all, if we dont hace a secure connction (http s ://...) How is it
true? is there a posibility that some one can see a page, even if it is protected by password? (the
scrit in tha page don't allow IDs that didn't past from the login page) is that script
sufficent? thanks a lot to every one /biggrin.gif" style="vertical-align:middle" e....
Manual Virus Removing And Security.
(0) Talking about manual removals of viruses I thought I better be a pioneer of this by sharing my
knowledge about a virus. I would like to tell the effects and manual removing technique of a very
common and irritating virus, that is HTML Redoff. First I would like to discuss its effects, HTML
Redoff virus infects kernel32.dll file which is installed in your “WINDOWS\SYSTEM” directory in case
you have Windows 98 and “WINDOWS\SYSTEM32” directory in case you have Windows XP and all the .htm,
.html, folder.htt and desktop.ini files on your PC thus it slows down your browsing ....
Serious Mac Os Flaws
Serious security flaws (1) On the end of February was discovered that the first trojan (Leap) to target Apple Computer's
Mac OS X, it was published on a new worm that exploits an 8-month-old vulnerability in the operating
system, its know by the name of Inqtana, the worm use Bluetooth to propagate, once it infects a
computer it searches for other Bluetooth-enabled devices and sends itself to those it finds, this
may not be very alarm, but the source code could be easily modified by a future attacker to do
damage like Symantec said, Symantec also says it believes the two pests were developed on....
Microsoft Ships First Vista Security Patches
yup, got that right -- VISTA (9) Microsoft Ships First Vista Security Patches http://www.eweek.com/article2/0,1895,1911406,00.asp
QUOTE Microsoft Corp. has shipped the first critical security update for Windows Vista, the
next version of its flagship operating system. Over the weekend, the company released patches for
beta testers running the Windows Vista December CTP (Community Technology Preview) and Windows Vista
Beta 1, and warned that the new operating system was vulnerable to a remote code execution flaw in
the Graphics Rendering Engine. A Microsoft spokesperson told eWEEK that the Vi....
Light To Heavy Security Tips
Some (helpful?) Suggestions (4) (excessively long intro, skip to 'suggestions' for immediate tips) Its almost 2 am and I
just finished an email detailing some ideas I had to keep systems a little more secure than usual (
tips that can be applied to most any Windows users system ). I dont feel like re-editing it so it
doesnt sound I copied and pasted it from my email, cause I did, and its late. Please note THIS IS
NOT SPAM. I did write all of this, just in an email before I copied and pasted it here. These are
entirely valid and ( I hope ) helpful tips for most anyone. Of course I hate just yap....
Evil Bit In Ipv4 Header
There's a security flag in IPv4 Header (0) I found this amusing. believe it or not, there is an evil bit in the IPv4 header, QUOTE The
bit field is laid out as follows: 0 +-+ |E| +-+
Currently-assigned values are defined as follows: 0x0 If the bit is set to 0, the packet has
no evil intent. Hosts, network elements, etc., SHOULD assume that the packet is
harmless, and SHOULD NOT take any defensive measures. (We note that this part of the spec
is already implemented by many common desktop operating systems.) 0x1....
System Security
Please critique my configuration (6) I would just like to have comments on any holes that I might have. I have been using this
configuration for a while, but want to hear what others think. Here's my security setup: OS:
XP Pro SP2 AV: AVG Antivirus, updates/scans automatically Firewall:
Sygate Personal Firewall AntiSpy: Spybot Search and Destroy, manual update/scan,
teatimer prevents unauthorized registry changes.
Spyware Blaster, manual update, automatic scan. Backup: Norton Ghost (sys....
Antihack Security
reply (8) Hello everyone. Ive looked over all of your questions. I think some of them are pointless. Although
they were questions so here are your anwsers. #1) Antihack was posted on a free site because its
free why pay #2) No it is not a virus os something were you got the IDEA is beyond me All I
am trying to do is tell everyone about antihack. I noticed people talk about computer issues here so
I said hey I bet those guys could use antihack. The reason why I like it is that I get everything
antivirus, antispyware, and firewall PLUS a hole crap load of security holes are....
Antihack Is Launched - Oct 14
Antihack Security is online (8) Hello everyone. This is FuRy your local 1UP resident. I have great news. Antihack is now online and
ready to serve your every need. They specialize in security and if your computer is running slow and
this happens often do to viruses and spyware. You should check out they can make it so that you
dont get viruses and spyware. They can even stop hacking issues. They walk you through everything
and even test your security before and after to show you the difference. Anyway just telling yah
have fun and later Removed link, post only made for advertising, and topic closed.....
Linux Security Tools
(5) Hi, I've posted some security tools and links in my last posts,I preferd to post new topic and
send he extra here : Network Sniffers # DSniff http://www.monkey.org/~dugsong/dsniff/ #
Ethereal - full network protocol sniffer/analyzer http://www.ethereal.com/ # IPTraf - curses based
IP LAN monitor http://iptraf.seul.org/ # TcpDump - network monitor and data acquisition
http://www.tcpdump.org/ # KISMET - 802.11 wireless network detector, sniffer and intrusion
detection system http://www.kismetwireless.net/ Online Tools # AutomatedScanning.com - commer....
List Of Security Sites
(7) List of security sites, I'll try to update the list as soon as I can . with compilations of
recent security threats, Global Incident Analysis Center (GIAC), GIAC training, and Reading Room
http://www.sans.org/ http://www.infragard.net/ http://www.cert.org/security-improvement/
CERT Security Improvement Modules,including general information on firewalls and intrusion
detectors. excellent set of papers on firewalls, viruses, e-commerce, etc. http://www.icsa.net/
http://www.gocsi.com/ (Source of the annual "CSI/FBI Computer Crime and Security Su....
Email Clients
Which One Do You Trust For Security? (23) Many people don't care about email account security and just go for a Hotmail account because
it's automatically MSN compatible or a Gmail account because it has lots of space. But out of
those of you who choose your email based on safetey and security, which client do you recommend?
There are tons out there. Personally, I use GMX.net, it's a German service with extremely high
security. They have a password meter to check your password for how easy or hard it might be to
guess, encouraging you to use upper and lower case letters along with numbers. They veri....
Wireless Network Security
(16) Hello Everyone, I am setting up a wireless network for my house, im finally getting rid of the
dial-up (cost justified it). My cable line will be installed soon, and I am going to wireless
network it so my two desktop PCs can share the Internet access. I've heard the mysterious
security issues, but most of them seem pretty obvious that you have to be ignorant to overlook, like
changing the admin password on your router, etc. Anyway, what I am getting at here is a question:
do you have any tips for securing a wireless network? Thanks! ....
Security Issue With Mozilla Based Browsers
Read the story onAstahost.com (22) I'm not going to post the same issue / solution on both forums. If you have a Mozilla based
browser it would be in your best interest to read this story. Browsers affected by this exploit
are: Mozilla 1.7.x Mozilla Firefox 0.x Mozilla Firefox 1.x Mozilla Thunderbird 0.x Mozilla
Thunderbird 1.x Security Issue in Mozilla based browsers Thank You Nils....
Looking for security, issue, ctrl, c, copy, clipboard
|
*SIMILAR VIDEOS*
Searching Video's for security, issue, ctrl, c, copy, clipboard
*MORE FROM TRAP17.COM*
|
advertisement
|
|
