Any Website Can Steal Your Clipboard Content!

Discussion in 'General Chat' started by calum, Dec 8, 2007.

  1. #1
    Hello.

    Did you know that it is possible for any website to access your clipboard and send of its contents to the website owner.

    It can be done in Javascript and is bad if you are copying personal information such as a password.

    I have written an article in my blog about it with an explanation of how it works, how to protect yourself and have also created a demo that will show whether you are vulnerable or not.

    Here is a link:

    JavaScript Can Read Your ClipBoard

    If you think its good then please social bookmark it :)

    Thanks
    Calum
     
    calum, Dec 8, 2007 IP
  2. uglyboy

    uglyboy Peon

    Messages:
    1,963
    Likes Received:
    134
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Doesn't concern me, I stopped using IE for general browsing years ago..
     
    uglyboy, Dec 8, 2007 IP
  3. anions

    anions Notable Member

    Messages:
    4,840
    Likes Received:
    179
    Best Answers:
    0
    Trophy Points:
    275
    #3
    Hmm, so thats how you plan to take over the world - firefox!
     
    anions, Dec 8, 2007 IP
  4. Michael-Martin

    Michael-Martin Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    It's always nice to read these things and find that once again, FireFox users are grand. :)
     
    Michael-Martin, Dec 8, 2007 IP
  5. uglyboy

    uglyboy Peon

    Messages:
    1,963
    Likes Received:
    134
    Best Answers:
    0
    Trophy Points:
    0
    #5

    Sshhhh.. Say nothing..
     
    uglyboy, Dec 8, 2007 IP
  6. calum

    calum Peon

    Messages:
    2,821
    Likes Received:
    141
    Best Answers:
    0
    Trophy Points:
    0
    #6
    Yeah, Firefox users, and any other wb browser users are protected from it, it only that thing by M$ that isn't, strange how something that is free is better than something that you can only get with a $xxx OS.
     
    calum, Dec 8, 2007 IP
  7. ::Mike::

    ::Mike:: Peon

    Messages:
    826
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Its not a security issue, IE include it for many reasons.
    As you can see by having the option to up the security button its built in for a reason, this is no reason to slam IE.
     
    ::Mike::, Dec 8, 2007 IP
  8. anions

    anions Notable Member

    Messages:
    4,840
    Likes Received:
    179
    Best Answers:
    0
    Trophy Points:
    275
    #8
    Maybe not, but there sure are plenty others ;)

    Time to switch to firefox n00b.
     
    anions, Dec 8, 2007 IP
  9. Agent_Dweeb

    Agent_Dweeb Peon

    Messages:
    5,607
    Likes Received:
    384
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Try firefox.

    All da 1337 hax0rs u53 1t!!!!!

    Seriously, switch to Firefox.
     
    Agent_Dweeb, Dec 8, 2007 IP
  10. Michael-Martin

    Michael-Martin Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Having the option means having to actually do it though. Considering that most of IE's users are using IE because it's the default browser for them (Which is fair enough. No need for them to switch :) ), but security should be something they never have to worry about.
     
    Michael-Martin, Dec 8, 2007 IP
  11. timsdd

    timsdd Peon

    Messages:
    21,102
    Likes Received:
    1,019
    Best Answers:
    0
    Trophy Points:
    0
    #11
    IE7 actually warns you that X web site is trying to access the clipboard...it asks you to allow interaction or to deny. But who knows, the JS demons probably have a script to bypass the security feature!
     
    timsdd, Dec 8, 2007 IP
  12. calum

    calum Peon

    Messages:
    2,821
    Likes Received:
    141
    Best Answers:
    0
    Trophy Points:
    0
    #12
    Yes but only if it is enabled, I know several people who had it freely accessable without them knowing.
     
    calum, Dec 8, 2007 IP
  13. zac439

    zac439 Notable Member

    Messages:
    3,074
    Likes Received:
    214
    Best Answers:
    0
    Trophy Points:
    260
    #13
    This is old news.

    It isn't like a website could steal the contents of your clipboard and get anything useful in most cases. Even if they do get a password such as KJD8sd9dF- do they know what website it corresponds to? Or even your username? No.

    The risk is low, but still valid in some cases. Still really old news...
     
    zac439, Dec 8, 2007 IP
  14. Infidel

    Infidel Active Member

    Messages:
    257
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    58
    #14
    Infidel, Dec 8, 2007 IP
  15. timsdd

    timsdd Peon

    Messages:
    21,102
    Likes Received:
    1,019
    Best Answers:
    0
    Trophy Points:
    0
    #15
    I figured by the time IE7 rolled out they forced everything to be enabled. :eek:
    Are you sure you want to visit this site? Are you sure you want to spell check... :rolleyes:
     
    timsdd, Dec 8, 2007 IP
  16. calum

    calum Peon

    Messages:
    2,821
    Likes Received:
    141
    Best Answers:
    0
    Trophy Points:
    0
    #16
    Yeah, you know when you first use it you have to enable your home page as a new tab page or else it just goes to a blank page.

    It also isn't clear what to do but in FireFox it is easy.
     
    calum, Dec 9, 2007 IP