Clipboard Hacking

Friends,

Among bevy of mails I get regularly from different persons, today I find very useful information which I think I should share with you all.

This is about taking information from clipboard (when we copy any text, it goes to clipboard) and putting the text into web page. In out internet life, we sometimes copy the passwords, usernames from the local hard drives and paste those into the webpage we are accessing. Unknowingly, those copied password are stored into the clipboard.

Now the trick is that using java script, the clipboard data can be retrieved and can be shown in the webpage. In another way, it can be retrieved by hackers and he can use it and he can access your account even without letting you know.

The java script used to get the clipboard data is:


var content = clipboardData.getData("Text");
if (content!=null) {
document.write(content);
document.write("");
}


However, there is a way to prevent it. The provision is given in the Internet Options itself. If you want to prevent copying via script then follow the steps:

Go to internet options->security ……………. Press custom level …………In the security settings, select disable under Allow paste operations via script.

So Remember the text you last copied for pasting (copy & paste) can be stolen when you visit web sites using a combination of JavaScript and ASP (or PHP, or CGI) to write your possible sensitive data to a database on another server. Hopefully you haven't copied a credit card number recently before surfing!

Have a safe surfing and have a safe internet life.