Another way hackers can steal from you.

Did you know that the contents of your “Clipboard” can be read from a web site?

Try this. Open Notepad, type something and then select and copy it. (CTRL-C)

Now go to this site:

http://www.friendlycanadian.com/applications/clipboard.htm

Interesting?

I looked at the source for the page. Here’s the very basic code to make it work. Cut and paste it into a notepad document and save as .html

\

Didn’t work for me. But I use Firefox. Probably only works for Internet Explorer.

Yup, clipboardData.getData only works in IE.

Another reason to use Firefox.

Mukade

Yep. Doesn’t work in Firefox. IE and Netscape.

I’m not sure what step I’m missing. I copied your html script into a NotePad file and saved it as a .html file. When I access the url you provided I see nothing on the web page that might have been in my clipboard. When I try to use my browser to access the saved NotePad html file I also see nothing.

I am using Netscape 8.0.1.

djm

The latter releases of Netscape are based on the same Mozilla codebase as Firefox, so it probably won’t work.

As written, the html doesn’t do anything but dump your clipboard to the browser window. It’s all client side on your PC. However, you could extend it to make an XmlHttpRequest to another machine and send your clipboard data to someones website.

Good grief…

Way to go, Gates. Secure as ever. :roll:

You can turn it off in IE’s advanced options, but it’s on by default.

But I agree, use Firefox.

[quote=“Craig Stuntz”[You can turn it off in IE’s advanced options, but it’s on by default. But I agree, use Firefox.[/quote]

I’m lost here – which one do you turn off in IE’s advanced options?

Thanks for posting the warning.

I got this:


WARNING, TEXT RETRIEVED: (see below)

Handelsbanken Visa, 1354 0965 3280 0763, 11/06, 764.


:astonished: :astonished: :astonished: :astonished: :astonished: :astonished: :astonished: :astonished: :astonished: :astonished: :astonished:

Those are my visa card number, good through date and validation code,
it would have been a disaster if these ended up on the net.

To be on the safe side I better disable Windows…hmm.. push this button here… and now it shou

..hope that Visa number is a joke and not the real one, Marcus…lol :laughing: :laughing: :laughing: :laughing:

Thanks for your concern boyd but I’m not THAT stupid.
I wrote it backwards so nobody would be able to use it
:smiley:

Cheers!

/MarcusR

Heh, having once worked for Citibank, I could tell at a glance that the number wasn’t valid, forward or backwards :wink: Visa #'s all start with 4.

Apologies; it used to be in Advanced Options, now it’s in Security. Go to Custom Level, then Allow Paste Operatins via Script.

I was also somewhat anachronistic to say it’s allowed by default. This has changed recently; the default is now to prompt you.