Jul 25, 2008

Security Issue With Ctrl+c/copy On Clipboard

Free Web Hosting, No Ads > CONTRIBUTE > Computers > Computer Security Issues & Exploits
Pages: 1, 2, 3, 4

free web hosting

Security Issue With Ctrl+c/copy On Clipboard

cse-icons
hi friends,

We all copy various data by using ctrl+c/Copy for pasting elsewhere.
This copied data is stored on clipboard and is accessible over the net by a combination of Javascripts and ASP.

Just try this:
1) Copy any text by ctrl+c
2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm
3) You will see the text you copied on the Screen which was
accessed by this web page.

Moral:
Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it.

To Avoid This
To avoid this, follow these steps:

1. Go to internet options->security

2. Press custom level

3. In the security settings, select disable under Allow paste operations via script.
Now the contents of your clipboard are safe.

Pass this information on to create an awareness of the same.

Safe Browsing,
Cheers.

 

 

 


Reply

Mature Lamb
Wow! Thanks for the tip. Very useful information you posted. I never really put any of my passwords or personal information on clipboard, but this tip may actually help if I do. Thanks, once again. biggrin.gif

Reply

mayank
Yeah this is certainly a great tip!
I used to copy and paste my passwords but now i am not going to that anymore.
thanks again buddy!

Reply

icemarle
Weird, it doesn't work on Firefox (well, for me) and the last thing I copied wasn't right when I viewed it on IE. Anyway, thanks for the tip. That's something that people will want to bear in mind, considering that it's an overlooked feature and all. We usually trust the innocent Ctrl+C that we don't know about the flaw it has. Sigh... why does it have something to do with Javascript and the like? dry.gif It's so annoying...

Reply

sunny
It can be done by just using Javascript. The ASP (or PHP) can be used to store this information to any database.

Most important thing: It only Works with Internet Explorer and Netscape.

So get a real browser, Get Firefix [http://www.mozilla.org/products/firefox/] .

Reply

Microsoft
FireFox*

well then i dont have to worry aobut it? i run in a firefox browser :/

Reply

crapoartworks
Whoa, I never knew that..... Thanks for sharing! wink.gif

Reply

ManOfSTEEL
QUOTE(cse-icons @ Sep 8 2005, 03:29 PM)

Just try this:
1) Copy any text by ctrl+c
2) Click the Link: http://www.friendlycanadian.com/applications/clipboard.htm
3) You will see the text you copied on the Screen which was
accessed by this web page.

Moral:
Do not keep sensitive data (like passwords, creditcard numbers, PIN etc.) in the clipboard while surfing the web. It is extremely easy to extract the text stored in the clipboard to steal your sensitive information. If sufficient data is stored by mistake it would give away confidential and important information without you knowing about it.


That was a nice tips to me, but not all copied data can be retrieve by this website like wat you have said password, if the text you copied is encrypted it will not be able to get the data. although those data that can be read with your naked eyes can be retrieved.

anyway to make sure that your data is safe, follow the instruction that cse-icons posted smile.gif

 

 

 


Reply

sandbox
Wow, yet another reason to love and use Firefox. I copy and paste my passwords all the time because I can never remember them. Great tip! It's scary to imagine all the people out there (90% of market, right?) that could be surfing with their clipboards easily viewable by malicious web sites.

Reply

Becca
woah, I never knew that. That is seriously bad! I'm kinda scared now because I've started to use CTRl+C more and more and stuff.

Reply

Latest Entries

MarCrush
Thanks for the info, I had no idea this was possible. Good thing you told us. smile.gif

Reply

wild20
Wow, thanks for that information. I would paste everything and anything during my websurfing! It is dangerous. The technology they have these days is just plain scary. Even if it is only a script. I sure hope other people are somewhat aware of this. Probably not though. Thanks again.

Reply

Dooga
Well, I started using Opera a few weeks ago, and I find that it renders most pages more faster and pretty, and the clipboard won't get stolen. However, any script like the button with "Copy this text" or "Highlight this" won't work except on IE.

Reply

Adrian
This is a very serious issue. It's a good thing that this is not happening to firefox... I thought I was safe with internet explorer if I had all the windows updates available. But it looks like I was wrong. I suggest everyone to either follow the instructions or... use firefox ;-)

Reply

patelg
Such an important stuff and i did not knew that.

I use firefox 99.9% but it is good to know anyway.

Thanks for sharing such a greate info.




Reply



Got an Opinion! Express your Views! (no registration):-
Add your Reply/ Opinion/ Views/ Comments/ Suggestion/ Questions/ Queries etc.
Posts with decent grammar & English will be accepted and please refrain from profanities.
For asking a Question, We recommend you to sign-up (for free) so that you can track the topic easily.

Nature of your Post*: Opinion/ Reply/ Comments
Question/Query
Feedback to us.
       
Name   Email
Title/Question*

(Maximum characters: 10,000)
You have characters left.
Confirm Code:

Pages: 1, 2, 3, 4
Recent Queries:-
  1. secure clipboard copy - 1.91 hr back. (1)
  2. firefox 3 copy headers to clipboard - 24.79 hr back. (1)
  3. firefox clipboard security vista - 34.89 hr back. (1)
  4. clipboard security xp - 36.62 hr back. (1)
  5. how to disabled ctrl c, ctrl a in mozilla browser - 54.28 hr back. (1)
  6. ctrl c this copied data is stored in clipboard and is accessible from the net - 59.64 hr back. (1)
  7. copying to clipboard in vista - 60.17 hr back. (1)
  8. audit my pc clipboard hole - 73.94 hr back. (1)
  9. how to disable copy ctrl c in javascript - 76.07 hr back. (1)
  10. javascript clipboard disable copy - 92.68 hr back. (1)
  11. clipboard security trust - 93.26 hr back. (1)
  12. issues copying with ctrl c - 102.45 hr back. (1)
  13. disable ctrl c in php - 106.30 hr back. (1)
  14. c# ctrl c to copy - 122.30 hr back. (1)
Similar Topics

Keywords : security, issue, ctrl, c, copy, clipboard

  1. White Paper: Security Threat Report: 2008
    (0)
  2. Security Warning 2008: Top 11 Malware Threats To Watch Out For
    (0)
    Before I go into this topic I have to say, stop making up these crazy names. I know I just getting
    into the security side of things but still as long as there are computer problems and ways to sucker
    someone into downloading the stuff, the crazy names will still live on. QUOTE Lieware
    ADVERTISEMENT In 2007, there was a lot of "rogue anti-virus software," which is sometimes also
    referred to as "fake anti-virus software." But these terms are confusing because there's too
    much negation going on. Fake anti-virus software is not anti-virus software at all. So what ....
  3. New Security Hole Discovered In Excel
    (0)
    Well I have to same I am bit surprise on this security flaw especially what it can do; in which all
    a user has to do is open a malicious Excel document and it allows the hackers to execute remote code
    on to your system. As far as how wide spread this vulnerability is, it hits every excel software
    from Excel 2000 to Excel 2003 SP2, and it also includes the Mac Version of Excel 2004 as well. OF
    course with the disappointment of Office 2007 by some people will still be running the 2003 versions
    on their computers. Right now the attacks are minimal and the question for t ....
  4. Security Commom Sense
    (0)
    A very good article titled "Security Common Sense" in gnucitizen.org Below is the link to that
    article http://www.gnucitizen.org/blog/security-common-sense Website Link
    http://www.gnucitizen.org "We basically train a bunch of monkeys to click the yes button for
    every security warning." Don't you think many of us fall under the category? because most of
    the time we do not see what the dialog says, but press Yes, which might not treat you well
    sometimes... A good read.....
  5. Symantec's Top 10 Internet Security Trends Of 2007
    (3)
    Well I saw this article and after reading it all just to find the top 10 security problems I thought
    I share them and give my thoughts about them. I know I know its horrible but what can I say, its me
    /laugh.gif" style="vertical-align:middle" emoid=":lol:" border="0" alt="laugh.gif" />. 1.) Data
    Breaches For the most part I am not surprise especially the big stories of 2007 which include the
    TJ Max breach of 45 million credit/debit cards; I believe that has been the biggest hack job ever in
    terms of stolen cards and id theft (somewhat). Oh lets not forget the al....
  6. Security Guidelines For Internet Users
    (6)
    Security Guidelines for Internet Users 1. Install an anti-virus software, you can free ones like
    AVG Free . Ensure that it's regularly updated - this is of the utmost importance. 2.
    Anti-virus software is not enough, the security can be tightened using a firewall software which
    will help you prevent unauthorized incoming and outgoing communications from your computer while
    connected to the Internet. 3. Disconnect your computer from the Internet when not in use. The
    longer you are connected to the Internet, the more opportunity you give for persons to gain un....
  7. Php Security Vulnerability - Beware From Spammers
    If you notice your site becoming really slow, you may be a victim (1)
    QUOTE PHP Security If you are using PHP on your website we ask that you please read the
    following carefully. We have noticed a significant number of PHP websites are being compromised
    due to vulnerable PHP code. Spammers are scanning millions of websites on the Internet looking for
    PHP scripts that can be exploited to send spam. When they find a script that has a loophole they
    send thousands of email messages through the script, often taking down the website or severely
    impacting website performance. Generally these loopholes exploit code using paramet....
  8. Brand New Security Holes Found And Patch On This Month Updates And Office Exploits
    (0)
    Even though the fiasco with the .ANI exploit is still going strong microsoft released it's month
    updates this time they found 4 more critical breaches in it's systems (XP), most people should
    have gotten the update pop up screen yesterday. So here is the info on these critical flaws.
    http://go.microsoft.com/fwlink/?LinkId=84687 http://go.microsoft.com/fwlink/?LinkId=85130
    http://go.microsoft.com/fwlink/?LinkID=85163 http://go.microsoft.com/fwlink/?LinkID=85164
    http://go.microsoft.com/fwlink/?LinkId=80251 I don't know how reliable vista will be af....
  9. Security Firm Kaspersky Lab Creates Ipod Virus
    (1)
    With the flood of news coming about the .ani exploits it seems the tech world is recieve more news
    about new hacks, viruses and other bad stuff these days. Today Kaspersky Lab created a virus that
    is able to affect the Ipod, however, it is only affecting Ipod's that have linux installed and
    not the standard OS that comes with Ipod. The virus goes by the name of Podloso, although they say
    it doesn't show a current threat this virus does show the possiblity to install malware into
    devices such as the Ipod. They also mention that the virus does not copy it self....
  10. Major Flaw In .ani File Found In Windows 98 Through Vista Creates Major Security Risk
    Vista Aint that Secure at all (9)
    I was able to browse around this and found it interesting since this vunerability is found in 4
    Microsoft Operating Sytems, Windows 2000, Windows XP, Windows Vista, Windows 2003 Server. From the
    article Microsoft stated that their is a hole in the .ani files, which happen to be related tothe
    mouse cursor, when the mouse icon changes depending on what you do. They only mention that with
    this flaw it always hackers to break into someone computer and do their thing. But in another
    article relating to this attack it was mention that in order for this to happen a user has ....
  11. Cpanel Exploit
    security hole in cPanel to hack the servers of a hosting company (8)
    A pair days ago I read this new on Slashdot: cPanel Exploit Used to Circulate IE Exploit
    QUOTE "In a dangerous combination of unpatched exploits, hackers have used a previously
    undiscovered security hole in cPanel to hack the servers of a hosting company and use hundreds of
    hijacked sites to infect Internet Explorer users with malware using the unpatched VML exploit.
    cPanel, whose hosting automation software is used by many large hosting companies, has issued a fix.
    It's a local exploit, meaning the attacker must control a cPanel account on the target hosti....
  12. A Very Simple Security Tip
    for Windows 2000/XP (13)
    We all know the difference between a limited user and an administrator user under Win2k/XP - you
    can't/can install major software, perform system maintainence, and other stuff. But using a
    limited user on a day-to-day basis also provides you with decent protection from a bunch of threats:
    if the malware is running under your limited-rights user, it can only do as much as you can. For
    instance, a limited rights user can't edit the HKLM hive of the Registry, so any malware running
    under the same user won't be able to touch that area. It's extremely simple t....
  13. Rootkits
    the security threats that no one's heard of (2)
    a security threat to be concerned with is the increasing prevalence of viruses containing advanced
    rootkits to hide their actions or data on the computer. even from the anti-stuff tools. a
    rootkit was originally a name for tools that hackers/crackers would use to maintain root on
    unix/linux machines. root is the uber user with all the permissions on a linux box. on windows
    these tools can be used to hide data on the harddrive and in the registry by manipulating the way
    the data is stored. THe windows api(the thing windows uses to communicate to the hardware) read....
  14. Security Not Safe
    (2)
    Hi everyone!!!!!!! This is the last one!! /tongue.gif"
    style="vertical-align:middle" emoid=":P" border="0" alt="tongue.gif" /> Ok guys, I heard
    somewhere that if we protect some page with password, it is steel not safe at all, if we dont hace a
    secure connction (http s ://...) How is it true? is there a posibility that some one can see a page,
    even if it is protected by password? (the scrit in tha page don't allow IDs that didn't past
    from the login page) is that script sufficent? thanks a lot to every one /biggrin.....
  15. Manual Virus Removing And Security.
    (0)
    Talking about manual removals of viruses I thought I better be a pioneer of this by sharing my
    knowledge about a virus. I would like to tell the effects and manual removing technique of a very
    common and irritating virus, that is HTML Redoff. First I would like to discuss its effects, HTML
    Redoff virus infects kernel32.dll file which is installed in your “WINDOWS\SYSTEM” directory in
    case you have Windows 98 and “WINDOWS\SYSTEM32” directory in case you have Windows XP and all
    the .htm, .html, folder.htt and desktop.ini files on your PC thus it slows down your....
  16. Serious Mac Os Flaws
    Serious security flaws (1)
    On the end of February was discovered that the first trojan (Leap) to target Apple Computer's
    Mac OS X, it was published on a new worm that exploits an 8-month-old vulnerability in the operating
    system, its know by the name of Inqtana, the worm use Bluetooth to propagate, once it infects a
    computer it searches for other Bluetooth-enabled devices and sends itself to those it finds, this
    may not be very alarm, but the source code could be easily modified by a future attacker to do
    damage like Symantec said, Symantec also says it believes the two pests were developed on....
  17. Microsoft Ships First Vista Security Patches
    yup, got that right -- VISTA (9)
    Microsoft Ships First Vista Security Patches http://www.eweek.com/article2/0,1895,1911406,00.asp
    QUOTE Microsoft Corp. has shipped the first critical security update for Windows Vista, the
    next version of its flagship operating system. Over the weekend, the company released patches for
    beta testers running the Windows Vista December CTP (Community Technology Preview) and Windows Vista
    Beta 1, and warned that the new operating system was vulnerable to a remote code execution flaw in
    the Graphics Rendering Engine. A Microsoft spokesperson told eWEEK that the Vi....
  18. Light To Heavy Security Tips
    Some (helpful?) Suggestions (4)
    (excessively long intro, skip to 'suggestions' for immediate tips) Its almost 2 am and I
    just finished an email detailing some ideas I had to keep systems a little more secure than usual (
    tips that can be applied to most any Windows users system ). I dont feel like re-editing it so it
    doesnt sound I copied and pasted it from my email, cause I did, and its late. Please note THIS IS
    NOT SPAM. I did write all of this, just in an email before I copied and pasted it here. These are
    entirely valid and ( I hope ) helpful tips for most anyone. Of course I hate just yap....
  19. Evil Bit In Ipv4 Header
    There's a security flag in IPv4 Header (0)
    I found this amusing. believe it or not, there is an evil bit in the IPv4 header, QUOTE   The
    bit field is laid out as follows:             0             +-+             |E|             +-+  
    Currently-assigned values are defined as follows:   0x0  If the bit is set to 0, the packet has
    no evil intent.  Hosts,         network elements, etc., SHOULD assume that the packet is        
    harmless, and SHOULD NOT take any defensive measures.  (We note         that this part of the spec
    is already implemented by many common         desktop operating systems.)   0x1....
  20. System Security
    Please critique my configuration (6)
    I would just like to have comments on any holes that I might have. I have been using this
    configuration for a while, but want to hear what others think. Here's my security setup: OS:
    XP Pro SP2 AV: AVG Antivirus, updates/scans automatically Firewall:
    Sygate Personal Firewall AntiSpy: Spybot Search and Destroy, manual update/scan,
    teatimer prevents unauthorized registry changes.
    Spyware Blaster, manual update, automatic scan. Backup: Norton Ghost (sys....
  21. Antihack Security
    reply (8)
    Hello everyone. Ive looked over all of your questions. I think some of them are pointless. Although
    they were questions so here are your anwsers. #1) Antihack was posted on a free site because its
    free why pay #2) No it is not a virus os something were you got the IDEA is beyond me All I
    am trying to do is tell everyone about antihack. I noticed people talk about computer issues here so
    I said hey I bet those guys could use antihack. The reason why I like it is that I get everything
    antivirus, antispyware, and firewall PLUS a hole crap load of security holes are....
  22. Antihack Is Launched - Oct 14
    Antihack Security is online (8)
    Hello everyone. This is FuRy your local 1UP resident. I have great news. Antihack is now online and
    ready to serve your every need. They specialize in security and if your computer is running slow and
    this happens often do to viruses and spyware. You should check out they can make it so that you
    dont get viruses and spyware. They can even stop hacking issues. They walk you through everything
    and even test your security before and after to show you the difference. Anyway just telling yah
    have fun and later Removed link, post only made for advertising, and topic closed.....
  23. Windows Security Scanners
    (0)
    hi all, In this topic I'm gonna start explain about windows security scanners , leave your
    comments and hope to enjoy /smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' />
    :: Nsauditor Network Security Auditor Nauditor is a network security scanner that allows to audit
    and monitor network computers for possible vulnerabilities , to see all open ports and owner program
    names, including the process loaded modules, kernel objects, memory details, remote address and
    state of connections, dns name, country where from, service associated with connect....
  24. Linux Security Tools
    (5)
    Hi, I've posted some security tools and links in my last posts,I preferd to post new topic and
    send he extra here : Network Sniffers # DSniff http://www.monkey.org/~dugsong/dsniff/ #
    Ethereal - full network protocol sniffer/analyzer http://www.ethereal.com/ # IPTraf - curses based
    IP LAN monitor http://iptraf.seul.org/ # TcpDump - network monitor and data acquisition
    http://www.tcpdump.org/ # KISMET - 802.11 wireless network detector, sniffer and intrusion
    detection system http://www.kismetwireless.net/ Online Tools # AutomatedScanning.com - commer....
  25. Linux Security Books
    (5)
    hi all, here's a collection of top linux security books and you can obtain each one by searching
    in amazon.com . If you know more plz add it here . "Hacking Linux Exposed" by Brian Hatch, James B.
    Lee, George Kurtz ISBN #0072225645, McGraw-Hill (2nd edition) "Maximum Linux Security: A
    Hacker's Guide to Protecting Your Linux Server and Workstation" by Anonymous and John Ray ISBN
    #0672321343, Sams Covers not only audit and protection methods but also investigates and explains
    the attacks and how they work. "Network Intrusion Detection: An Analyst's Handbo....
  26. [article] Iis 6.0 Security
    (0)
    hey ,this article discusses the major default configuration and design changes incorporated in IIS
    6.0 to make it a more secure platform for hosting critical web applications. By: Contact : Link :
    http://securityfocus.com/infocus/1765 Personal info removed -- again ....
  27. List Of Security Sites
    (7)
    List of security sites, I'll try to update the list as soon as I can . with compilations of
    recent security threats, Global Incident Analysis Center (GIAC), GIAC training, and Reading Room
    http://www.sans.org/ http://www.infragard.net/ http://www.cert.org/security-improvement/
    CERT Security Improvement Modules,including general information on firewalls and intrusion
    detectors. excellent set of papers on firewalls, viruses, e-commerce, etc. http://www.icsa.net/
    http://www.gocsi.com/ (Source of the annual "CSI/FBI Computer Crime and Security Su....
  28. Top 75 Security Tools
    (3)
    Hey, I just saw "Top 75 Security Tools" page and it has lots of security tools wif description ,
    hope to enjoy /smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' />
    http://www.insecure.org/tools.html ....
  29. Email Clients
    Which One Do You Trust For Security? (23)
    Many people don't care about email account security and just go for a Hotmail account because
    it's automatically MSN compatible or a Gmail account because it has lots of space. But out of
    those of you who choose your email based on safetey and security, which client do you recommend?
    There are tons out there. Personally, I use GMX.net, it's a German service with extremely high
    security. They have a password meter to check your password for how easy or hard it might be to
    guess, encouraging you to use upper and lower case letters along with numbers. They veri....
  30. Security Issue With Mozilla Based Browsers
    Read the story onAstahost.com (22)
    I'm not going to post the same issue / solution on both forums. If you have a Mozilla based
    browser it would be in your best interest to read this story. Browsers affected by this exploit
    are: Mozilla 1.7.x Mozilla Firefox 0.x Mozilla Firefox 1.x Mozilla Thunderbird 0.x Mozilla
    Thunderbird 1.x Security Issue in Mozilla based browsers Thank You Nils....

    1. Looking for security, issue, ctrl, c, copy, clipboard

Searching Video's for security, issue, ctrl, c, copy, clipboard
Similar
White Paper:
Security
Threat
Report: 2008
Security
Warning
2008: Top 11
Malware
Threats To
Watch Out
For
New Security
Hole
Discovered
In Excel
Security
Commom Sense
Symantec'
;s Top 10
Internet
Security
Trends Of
2007
Security
Guidelines
For Internet
Users
Php Security
Vulnerabilit
y - Beware
From
Spammers -
If you
notice your
site
becoming
really slow,
you may be a
victim
Brand New
Security
Holes Found
And Patch On
This Month
Updates And
Office
Exploits
Security
Firm
Kaspersky
Lab Creates
Ipod Virus
Major Flaw
In .ani File
Found In
Windows 98
Through
Vista
Creates
Major
Security
Risk - Vista
Aint that
Secure at
all
Cpanel
Exploit -
security
hole in
cPanel to
hack the
servers of a
hosting
company
A Very
Simple
Security Tip
- for
Windows
2000/XP
Rootkits -
the security
threats that
no one's
heard of
Security Not
Safe
Manual Virus
Removing And
Security.
Serious Mac
Os Flaws -
Serious
security
flaws
Microsoft
Ships First
Vista
Security
Patches -
yup, got
that right
-- VISTA
Light To
Heavy
Security
Tips - Some
(helpful?)
Suggestions
Evil Bit In
Ipv4 Header
-
There's
a security
flag in IPv4
Header
System
Security -
Please
critique my
configuratio
n
Antihack
Security -
reply
Antihack Is
Launched -
Oct 14 -
Antihack
Security is
online
Windows
Security
Scanners
Linux
Security
Tools
Linux
Security
Books
[article]
Iis 6.0
Security
List Of
Security
Sites
Top 75
Security
Tools
Email
Clients -
Which One Do
You Trust
For
Security?
Security
Issue With
Mozilla
Based
Browsers -
Read the
story
onAstahost.c
om
advertisement



Security Issue With Ctrl+c/copy On Clipboard



 

 

 

 

ADD REPLY / Got an Opinion! Remove these ADs! RAPID SEARCH! Free Web Hosting [X]
Express your Opinions, Thoughts or Contribute more info. to help others.
Ask your Doubts & Queries to get answers, So that "Together We can help others!"
Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.
500MB Space *No Ads*, CPanel, FTP, PHP, MySQL, EMails - 100% FREE