Sunday, June 3, 2007

Be Careful with Ctrl + C

We do copy various data by ctrl+c for pasting elsewhere. This copied
data is stored in clipboard and is accessible from the net by a
combination of Javascripts and ASP.

Just try this:
1) Copy any text by ctrl+c
2) Click the Link:
http://www.friendlycanadian.com/applications/clipboard.htm
3) You will see the text you copied on the Screen which was
accessed by this web page.

Do not keep sensitive data (like passwords, creditcard numbers, PIN
etc.) in the clipboard while surfing the web. It is extremely easy to
extract the text stored in the clipboard to steal your sensitive
information.

Fortunately, the fix for this is also quite simple:

1. In Internet Explorer, go to Tools -> Internet Options -> Security

2. Click on Custom Level (preview image).

3. In the security settings, click to Disable the “Allow Paste Operations via script. That will keep your clipboard contents private

No comments: