Computer Security - Security Flaw: Any website can read your clipboard text

09-18-2005, 04:12 PM

Web sites you visit can retrieve data from your clipboard depending on
your security settings. Go to this page (www.clipboard.googlemyway.com)
and see if anything shows up in the box. If you are using Firefox or
Opera you probably won't see anything. However, if you are using
Internet Explorer then chances are that whatever you last copied into
your clipboard will be displayed.

sudarmuthu@gmail.com

09-18-2005, 05:30 PM

wrote:
> Web sites you visit can retrieve data from your clipboard depending on
> your security settings. Go to this page (www.clipboard.googlemyway.com)
> and see if anything shows up in the box. If you are using Firefox or
> Opera you probably won't see anything. However, if you are using
> Internet Explorer then chances are that whatever you last copied into
> your clipboard will be displayed.
>
Thanks, I collect sites like these.

Winged

Winged

09-20-2005, 02:12 AM

wrote:

> Web sites you visit can retrieve data from your clipboard depending on
> your security settings. Go to this page (www.clipboard.googlemyway.com)
> and see if anything shows up in the box. If you are using Firefox or
> Opera you probably won't see anything. However, if you are using
> Internet Explorer then chances are that whatever you last copied into
> your clipboard will be displayed.

I do not use Windows so I have not been able to verify it. However, if true,
has this been acknowledged by MS? Are they going to fix it?

Imhotep

Imhotep

09-20-2005, 02:13 AM

wrote:

> Web sites you visit can retrieve data from your clipboard depending on
> your security settings. Go to this page (www.clipboard.googlemyway.com)
> and see if anything shows up in the box. If you are using Firefox or
> Opera you probably won't see anything. However, if you are using
> Internet Explorer then chances are that whatever you last copied into
> your clipboard will be displayed.

....also you probably should post this to the MS newsgroups to let them know
also...

Imhotep

Imhotep

09-20-2005, 08:53 AM

On Mon, 19 Sep 2005 21:12:14 -0400, Imhotep <>
wrote:

> wrote:
>
>> Web sites you visit can retrieve data from your clipboard depending on
>> your security settings. Go to this page (www.clipboard.googlemyway.com)
>> and see if anything shows up in the box. If you are using Firefox or
>> Opera you probably won't see anything. However, if you are using
>> Internet Explorer then chances are that whatever you last copied into
>> your clipboard will be displayed.
>
>I do not use Windows so I have not been able to verify it. However, if true,
>has this been acknowledged by MS? Are they going to fix it?

Its certainly true.

One could regard it as a feature rather than a bug and there is the
option to turn it off. Mine is now off because its a feature to live
without.

On the whole, Firefox is a lot better.

--
Jim Watt
http://www.gibnet.com

Jim Watt

09-20-2005, 04:35 PM

Jim Watt <_way> wrote:

>>> Web sites you visit can retrieve data from your clipboard depending on
>>> your security settings. Go to this page (www.clipboard.googlemyway.com)
>>> and see if anything shows up in the box. If you are using Firefox or
>>> Opera you probably won't see anything. However, if you are using
>>> Internet Explorer then chances are that whatever you last copied into
>>> your clipboard will be displayed.
>>
>>I do not use Windows so I have not been able to verify it. However, if true,
>>has this been acknowledged by MS? Are they going to fix it?
>
>Its certainly true.
>
>One could regard it as a feature rather than a bug and there is the
>option to turn it off. Mine is now off because its a feature to live
>without.

Where would that option to turn it off be located?

Zilbandy

09-20-2005, 05:40 PM

On Tue, 20 Sep 2005 08:35:47 -0700, Zilbandy
<> wrote:

>Jim Watt <_way> wrote:
>
>>>> Web sites you visit can retrieve data from your clipboard depending on
>>>> your security settings. Go to this page (www.clipboard.googlemyway.com)
>>>> and see if anything shows up in the box. If you are using Firefox or
>>>> Opera you probably won't see anything. However, if you are using
>>>> Internet Explorer then chances are that whatever you last copied into
>>>> your clipboard will be displayed.
>>>
>>>I do not use Windows so I have not been able to verify it. However, if true,
>>>has this been acknowledged by MS? Are they going to fix it?
>>
>>Its certainly true.
>>
>>One could regard it as a feature rather than a bug and there is the
>>option to turn it off. Mine is now off because its a feature to live
>>without.
>
>Where would that option to turn it off be located?

tools>internet options>security>custom level

navigate the tree to

scripting
allow paste operations by script

and check the 'disable' radio button.
--
Jim Watt
http://www.gibnet.com

Jim Watt

09-20-2005, 08:09 PM

Jim Watt <_way> writes:

>On Tue, 20 Sep 2005 08:35:47 -0700, Zilbandy
><> wrote:

>>Jim Watt <_way> wrote:
>>
>>>>> Web sites you visit can retrieve data from your clipboard depending on
>>>>> your security settings. Go to this page (www.clipboard.googlemyway.com)
>>>>> and see if anything shows up in the box. If you are using Firefox or
>>>>> Opera you probably won't see anything. However, if you are using
>>>>> Internet Explorer then chances are that whatever you last copied into
>>>>> your clipboard will be displayed.

This is very iffy. For example, the web site could just be sending a
message to your browser to display the clipboard. This does NOT mean that
the remote site knows anything about your clipboard, just that it has told
your own browser on your own machine to display the clipboard, a totally
secure thing to do.

Are you sure this is anything different than that, ie, that the remote site
can get the contents of your clipboard?

>>>>
>>>>I do not use Windows so I have not been able to verify it. However, if true,
>>>>has this been acknowledged by MS? Are they going to fix it?
>>>
>>>Its certainly true.
>>>
>>>One could regard it as a feature rather than a bug and there is the
>>>option to turn it off. Mine is now off because its a feature to live
>>>without.
>>
>>Where would that option to turn it off be located?

>tools>internet options>security>custom level

>navigate the tree to

>scripting
> allow paste operations by script

>and check the 'disable' radio button.
>--
>Jim Watt
>http://www.gibnet.com

Unruh

09-20-2005, 10:35 PM

Thanks.

Jim Watt <_way> wrote:

>tools>internet options>security>custom level
>
>navigate the tree to
>
>scripting
> allow paste operations by script

Zilbandy

09-20-2005, 11:20 PM

On 20 Sep 2005 19:09:23 GMT, Unruh <unruh-> wrote:

>This is very iffy. For example, the web site could just be sending a
>message to your browser to display the clipboard. This does NOT mean that
>the remote site knows anything about your clipboard,

Look at the site more carefully, he has another example where he
emails you the clipboard contents ...

If you are sneaky you can also grab teh javascript to see how and
what gets done.
--
Jim Watt
http://www.gibnet.com

Jim Watt

09-18-2005, 05:30 PM	#2
Winged Posts: n/a	Re: Security Flaw: Any website can read your clipboard text wrote: > Web sites you visit can retrieve data from your clipboard depending on > your security settings. Go to this page (www.clipboard.googlemyway.com) > and see if anything shows up in the box. If you are using Firefox or > Opera you probably won't see anything. However, if you are using > Internet Explorer then chances are that whatever you last copied into > your clipboard will be displayed. > Thanks, I collect sites like these. Winged Winged

09-20-2005, 02:12 AM	#3
Imhotep Posts: n/a	Re: Security Flaw: Any website can read your clipboard text wrote: > Web sites you visit can retrieve data from your clipboard depending on > your security settings. Go to this page (www.clipboard.googlemyway.com) > and see if anything shows up in the box. If you are using Firefox or > Opera you probably won't see anything. However, if you are using > Internet Explorer then chances are that whatever you last copied into > your clipboard will be displayed. I do not use Windows so I have not been able to verify it. However, if true, has this been acknowledged by MS? Are they going to fix it? Imhotep Imhotep

09-20-2005, 02:13 AM	#4
Imhotep Posts: n/a	Re: Security Flaw: Any website can read your clipboard text wrote: > Web sites you visit can retrieve data from your clipboard depending on > your security settings. Go to this page (www.clipboard.googlemyway.com) > and see if anything shows up in the box. If you are using Firefox or > Opera you probably won't see anything. However, if you are using > Internet Explorer then chances are that whatever you last copied into > your clipboard will be displayed. ....also you probably should post this to the MS newsgroups to let them know also... Imhotep Imhotep

09-20-2005, 08:53 AM	#5
Jim Watt Posts: n/a	Re: Security Flaw: Any website can read your clipboard text On Mon, 19 Sep 2005 21:12:14 -0400, Imhotep <> wrote: > wrote: > >> Web sites you visit can retrieve data from your clipboard depending on >> your security settings. Go to this page (www.clipboard.googlemyway.com) >> and see if anything shows up in the box. If you are using Firefox or >> Opera you probably won't see anything. However, if you are using >> Internet Explorer then chances are that whatever you last copied into >> your clipboard will be displayed. > >I do not use Windows so I have not been able to verify it. However, if true, >has this been acknowledged by MS? Are they going to fix it? Its certainly true. One could regard it as a feature rather than a bug and there is the option to turn it off. Mine is now off because its a feature to live without. On the whole, Firefox is a lot better. -- Jim Watt http://www.gibnet.com Jim Watt

09-20-2005, 04:35 PM	#6
Zilbandy Posts: n/a	Re: Security Flaw: Any website can read your clipboard text Jim Watt <_way> wrote: >>> Web sites you visit can retrieve data from your clipboard depending on >>> your security settings. Go to this page (www.clipboard.googlemyway.com) >>> and see if anything shows up in the box. If you are using Firefox or >>> Opera you probably won't see anything. However, if you are using >>> Internet Explorer then chances are that whatever you last copied into >>> your clipboard will be displayed. >> >>I do not use Windows so I have not been able to verify it. However, if true, >>has this been acknowledged by MS? Are they going to fix it? > >Its certainly true. > >One could regard it as a feature rather than a bug and there is the >option to turn it off. Mine is now off because its a feature to live >without. Where would that option to turn it off be located? Zilbandy

09-18-2005, 04:12 PM	#1
	Security Flaw: Any website can read your clipboard text Web sites you visit can retrieve data from your clipboard depending on your security settings. Go to this page (www.clipboard.googlemyway.com) and see if anything shows up in the box. If you are using Firefox or Opera you probably won't see anything. However, if you are using Internet Explorer then chances are that whatever you last copied into your clipboard will be displayed. sudarmuthu@gmail.com

09-20-2005, 05:40 PM	#7
Jim Watt Posts: n/a	Re: Security Flaw: Any website can read your clipboard text On Tue, 20 Sep 2005 08:35:47 -0700, Zilbandy <> wrote: >Jim Watt <_way> wrote: > >>>> Web sites you visit can retrieve data from your clipboard depending on >>>> your security settings. Go to this page (www.clipboard.googlemyway.com) >>>> and see if anything shows up in the box. If you are using Firefox or >>>> Opera you probably won't see anything. However, if you are using >>>> Internet Explorer then chances are that whatever you last copied into >>>> your clipboard will be displayed. >>> >>>I do not use Windows so I have not been able to verify it. However, if true, >>>has this been acknowledged by MS? Are they going to fix it? >> >>Its certainly true. >> >>One could regard it as a feature rather than a bug and there is the >>option to turn it off. Mine is now off because its a feature to live >>without. > >Where would that option to turn it off be located? tools>internet options>security>custom level navigate the tree to scripting allow paste operations by script and check the 'disable' radio button. -- Jim Watt http://www.gibnet.com Jim Watt

09-20-2005, 08:09 PM	#8
Unruh Posts: n/a	Re: Security Flaw: Any website can read your clipboard text Jim Watt <_way> writes: >On Tue, 20 Sep 2005 08:35:47 -0700, Zilbandy ><> wrote: >>Jim Watt <_way> wrote: >> >>>>> Web sites you visit can retrieve data from your clipboard depending on >>>>> your security settings. Go to this page (www.clipboard.googlemyway.com) >>>>> and see if anything shows up in the box. If you are using Firefox or >>>>> Opera you probably won't see anything. However, if you are using >>>>> Internet Explorer then chances are that whatever you last copied into >>>>> your clipboard will be displayed. This is very iffy. For example, the web site could just be sending a message to your browser to display the clipboard. This does NOT mean that the remote site knows anything about your clipboard, just that it has told your own browser on your own machine to display the clipboard, a totally secure thing to do. Are you sure this is anything different than that, ie, that the remote site can get the contents of your clipboard? >>>> >>>>I do not use Windows so I have not been able to verify it. However, if true, >>>>has this been acknowledged by MS? Are they going to fix it? >>> >>>Its certainly true. >>> >>>One could regard it as a feature rather than a bug and there is the >>>option to turn it off. Mine is now off because its a feature to live >>>without. >> >>Where would that option to turn it off be located? >tools>internet options>security>custom level >navigate the tree to >scripting > allow paste operations by script >and check the 'disable' radio button. >-- >Jim Watt >http://www.gibnet.com Unruh

09-20-2005, 10:35 PM	#9
Zilbandy Posts: n/a	Re: Security Flaw: Any website can read your clipboard text Thanks. Jim Watt <_way> wrote: >tools>internet options>security>custom level > >navigate the tree to > >scripting > allow paste operations by script Zilbandy

09-20-2005, 11:20 PM	#10
Jim Watt Posts: n/a	Re: Security Flaw: Any website can read your clipboard text On 20 Sep 2005 19:09:23 GMT, Unruh <unruh-> wrote: >This is very iffy. For example, the web site could just be sending a >message to your browser to display the clipboard. This does NOT mean that >the remote site knows anything about your clipboard, Look at the site more carefully, he has another example where he emails you the clipboard contents ... If you are sneaky you can also grab teh javascript to see how and what gets done. -- Jim Watt http://www.gibnet.com Jim Watt

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Computer Security Information and What You Can Do To Keep Your SystemSafe!	Ann.Anderson.group.com@gmail.com	A+ Certification	0	12-06-2007 01:55 AM
Computer Security	aldrich.chappel.com.use@gmail.com	A+ Certification	0	11-27-2007 02:11 AM
Computer Security Information (Free Articles and eBooks)	aditya.jaiswal.com.use@gmail.com	DVD Video	0	10-10-2007 04:53 AM
problems backing up dvds	Lawrence Traub	DVD Video	11	09-27-2005 07:34 PM
Burn process failed - help! Log file posted for help troubleshooting	Michael Mason	DVD Video	1	08-16-2004 09:24 PM