View Full Version : Clipboard Vulnerabilities
Grandma Carolyn
13th February 2006, 07:55 PM (19:55)
I just discovered that my computer information may not be as safe as I thought that it was.
Please check out this website and let me know what you think of it.
I did the internet options as suggested in the fix it instructions.
I am interested if this is something that others knew about.
Is it as scary as it looks?
http://www.komando.com/tips.asp
**GC**
Gary Swartzlander
14th February 2006, 05:34 PM (17:34)
The article relates to the size of the print you are seeing, unless you need new glasses that doesn't seem real scarey to me?
Is the link correct?
Grandma Carolyn
14th February 2006, 08:21 PM (20:21)
The article relates to the size of the print you are seeing, unless you need new glasses that doesn't seem real scarey to me?
Is the link correct?
Thanks for responding to my post, Gary. I don't know how it happened, but you are correct. The link did not go to the place that I intended it to go.
I copied and pasted the information here in hopes that it is correct this time.
I followed the instructions on how to correct the problem in my internet options. On my computer before the fix, if I copied anything on the clipboard in order to copy and paste, it DiD show up at the link on the internet that is suggested to test to see if one's computer is vulnerable. Mine was.
Let me know if you can figure out what I'm talking about in this information.
No, I wasn't intending to discuss the sizes of the fonts.
gc
Here is the information, pasted here for your convenience from Kim's site;
. Is it safe to use the Windows Clipboard while using the Web? Can I keep all my sensitive numbers in a Word file and just paste them in? That way, a keylogger won't get me typing them in.
A. You raise an interesting issue. And so that we’re all on the same page... the Windows Clipboard is a temporary holding area where things that you copy are stored.
I’m glad that you wrote because many people are simply unaware of this problem in Internet Explorer. A properly written JavaScript program could be used to swipe your information right off the Windows Clipboard when you’re visiting a Web page. It all happens behind the scenes.
Want to see it in action? Try this. Copy something (this sentence, for instance). Then go to the FriendlyCanadian site.
If you're using Internet Explorer, you should see whatever you copied.
However, when I did this on my computer, nothing showed up. I use the free browser Firefox. My Firefox is set up to use JavaScripts. But when the FriendlyCanadian site sent code to run JavaScript, something in Firefox kept it from working. I would not bet, though, that Firefox could not be accessed.
When I tried this using Internet Explorer, it worked fine. That means that a malicious Web site could copy anything you have on your Clipboard.
Fortunately, there is a way to secure Internet Explorer. In Internet Explorer, click Tools>>Internet Options. Select the Security tab. Under Web content zones, select Internet. Under Security level, click the Custom Level button.
Under Scripting, you'll see a setting labeled "Allow paste operations via script." For that setting, select Disable. Then click OK. Finally, click OK on the next window.
You could also just turn JavaScript off in both browsers. However, many Web sites will not display correctly. JavaScript is commonly used throughout the Internet.
Firefox may or may not be vulnerable to these attacks. Internet Explorer definitely is. Because Firefox is not an integral part of Windows, it is safer.
Getting back to your question, when you copy and paste your credit card number, for instance, it remains on the Clipboard. It stays there until you turn off the computer, or until you copy something else. You might be able to fool keyloggers, but that won't stop hackers from developing programs that steal information from the clipboard.
Really, you're safer making sure that keyloggers and other malicious programs never find their way onto your computer. Don't open attachments you weren't expecting. Don't download programs you never heard of. And run anti-spyware programs. Those rules will keep keyloggers off your computer. You can find some security programs on my Web site.
The link doesn't work where I copied and pasted here so, I'm trying again to share the link that should be connected to the words ThefriendlyCanadian Site.
http://www.komando.com/tips_show.asp?showID=9534
Browse all of Kim's Tips
Gina Stevenson
14th February 2006, 11:31 PM (23:31)
Yes, I saw that link, and tried the copy to clipboard deal of which they spoke, then clicked the thing that was supposed to show what's on your clipboard if it's vulnerable.
Guess what, Carolyn ... with Firefox, it didn't show up. Tried it a second time with something else to see if I missed something. Didn't show anytihng a second time ... or a third.
Perhaps you could try Firefox ... it's really easy to not lose bookmarks/favorites, to, as they transfer over into Firefox easily; somewhere in the process of setting it up, it asks if you want it to copy them from Internet Exporer. 'Really like Firefox after months of using it! ;)
{{{ hugs }}}
Grandma Carolyn
14th February 2006, 11:41 PM (23:41)
Yes, I saw that link, and tried the copy to clipboard deal of which they spoke, then clicked the thing that was supposed to show what's on your clipboard if it's vulnerable.
Guess what, Carolyn ... with Firefox, it didn't show up. Tried it a second time with something else to see if I missed something. Didn't show anytihng a second time ... or a third.
Perhaps you could try Firefox ... it's really easy to not lose bookmarks/favorites, to, as they transfer over into Firefox easily; somewhere in the process of setting it up, it asks if you want it to copy them from Internet Exporer. 'Really like Firefox after months of using it! ;)
{{{ hugs }}}
Hi Gina. Yes, I use Foxfire. It showed up as vulneable in Foxfire. I used the
internet options as discussed to fix the problem. I checked my IE and it was vulnerable there, too. But, I fixed it.
I just shared the problem that I discovered because it was such a shock to me that I could be vulnerable. I have Zone Alarm, plus other protections and Norton Antivirus is up to date.
Just trying to help others who may be vulnerable, but don't even have a clue that they are.
Thanks for sharing.
**GC**
Gina Stevenson
14th February 2006, 11:54 PM (23:54)
Whoa! Then I'd better recheck Firefox re that one program they mention might make browsers more vulnerable. Wondering now if I installed that thing-a-ma-jig on this newer computer, or just recall having installed it on that older one. I'll have to recheck it all.
Yes, I have ZoneAlarm, too ... and a couple of other things.
Thanks for letting me know that even Firefox showed up!! yipes! I've got some checking of my own to do, after checking for the program they said might make it vulnerable (too tired to even recall which one it is now). ;)
Hi Gina. Yes, I use Foxfire. It showed up as vulneable in Foxfire. I used the
internet options as discussed to fix the problem. I checked my IE and it was vulnerable there, too. But, I fixed it.
I just shared the problem that I discovered because it was such a shock to me that I could be vulnerable. I have Zone Alarm, plus other protections and Norton Antivirus is up to date.
Just trying to help others who may be vulnerable, but don't even have a clue that they are.
Thanks for sharing.
**GC**
Grandma Carolyn
15th February 2006, 12:12 AM (00:12)
Whoa! Then I'd better recheck Firefox re that one program they mention might make browsers more vulnerable. Wondering now if I installed that thing-a-ma-jig on this newer computer, or just recall having installed it on that older one. I'll have to recheck it all.
Yes, I have ZoneAlarm, too ... and a couple of other things.
Thanks for letting me know that even Firefox showed up!! yipes! I've got some checking of my own to do, after checking for the program they said might make it vulnerable (too tired to even recall which one it is now). ;)
Gina, I was, also, hoping that our NazNet Computer geeks would interpret what is happening with the problem that is discussed with the clipboard vulnerability and information and data becoming visiable on the internet if you use your clipboard to copy and paste valualble information and data.
There is so much that I keep learning everyday about my conputer and all this tech stuff! :)
Also, I think that I posted and started this thread in the wrong technology place. I think this thread or area is for tech stuff concerning NazNet, so, Scot of anyone who has the controls, please take the liberty and place this thread where it belongs. :)
**GC**
vBulletin® v3.7.3, Copyright ©2000-2008, Jelsoft Enterprises Ltd.