TRAP BOT.COM

Copy and Paste functions has become an important part of any computer users. But do you know that web sites you visit can retrieve data from your clipboard depending on your security settings. Regular users use it routinely to copy and paste information such as passwords and credit card numbers from one form to another.When you use the Cut or Copy functions, the information is stored in the computer’s memory in the clipboard. That information is later used when you paste it to another area of the same application or a different application.

The risk lies when secure informations are in the clipboard and if you are using Internet explorer for browsing sites.Just checkout this site(projectip.com) on Internet explorer for getting the current details of your clipboard.Newer Microsoft Office products, including Microsoft Word, allow you to keep more than one item in the clipboard at a time.

With the coming up of Ajax,it has become a lot more easier to steal information from your clipboard without even you knowing it.Internet Explorer has certain functions that let you copy whatever is on the clipboard inside your browser. So using simple JavaScript or Ajax a person can capture the information and send it to the server behind the scenes without anyone noticing.

How is the clipboard content retrieved?

Ajax makes it very simple to communicate with the server behind the scenes and hence can be used to steal information.Real-time keylogging is one method that is easier to do using Ajax.But the clipboard contents could be viewed only with Internet Explorer.(Firefox rulez!! ha ha..) Any way I don’t know what’s the case with IE7. Using JavaScript window.clipboardData.getData(”Text”) method, the current value on the clipboard can be retrieved. Using events such as oncopy, oncut and onbeforepaste, custom functionalities can be built to further manipulate the data on the clipboard.

How To Fix this Security Bug.

Fix: Go to Tools > Internet Options > Security > Select a security zone > Custom Level > Scripting > Allow paste operations via script and set it to Disabled or Prompt.

Clipboard viewer in Windows Xp

Open the Windows(systemroot) folder.
Double-click on the System32 folder.
Scroll down the page until you locate a file named Clipbrd.exe and open the program and view your clipboard contents.

Categories: Security, Windows
Tags: Ajax, Internet, Security, Windows