Click HereClick Here
home features news forums classifieds faqs links search
5223 members 
Amiga Q&A /  Free for All /  Emulation /  Gaming / (Latest Posts)
Login

Nickname

Password

Lost Password?

Don't have an account yet?
Register now!

Support Amigaworld.net
Your support is needed and is appreciated as Amigaworld.net is primarily dependent upon the support of its users.
Donate

Menu
Main sections
» Home
» Features
» News
» Forums
» Classifieds
» Links
» Downloads
Extras
» OS4 Zone
» IRC Network
» AmigaWorld Radio
» Newsfeed
» Top Members
» Amiga Dealers
Information
» About Us
» FAQs
» Advertise
» Polls
» Terms of Service
» Search

IRC Channel
Server: irc.amigaworld.net
Channel: #Amigaworld
Channel Policy and Guidelines

(Uses JAVA Applet and Port 1024)
Visit the Chatroom Website

Who's Online
 61 guest(s) on-line.
 8 member(s) on-line.


samo79, elwood, OlafS25, more...

You are an anonymous user.
Register Now!
 Overflow:  13 secs ago
 samo79:  24 secs ago
 Daytona675x:  28 secs ago
 Menthos:  1 min ago
 tboeckel:  2 mins ago
 OlafS25:  3 mins ago
 elwood:  4 mins ago
 invent:  4 mins ago
 Condor:  5 mins ago
 TrevorDick:  9 mins ago

/  Forum Index
   /  General Technology (No Console Threads)
      /  So websites can read my clipboard?
Register To Post

Goto page ( 1 | 2 | 3 Next Page )
PosterThread
olegil 
So websites can read my clipboard?
Posted on 19-Nov-2005 13:49:31
#1 ]
Elite Member
Joined: 22-Aug-2003
Posts: 5416
From: Work

If this is old news then just ignore me.

I just found a "nice" piece of javascript that actually reads out the contents of my clipboard when I'm using IE...

Try it out for yourself:

http://oeh.network-electronics.com/~olegil/clipboard.html

It's safe, I'm not storing anything. But if you don't trust me, make sure not to have anything secret/sensitive in the copy/paste buffer. And you should of course not trust me. Using Opera, I get nothing. Using IE6 I get the last clipboard entry. I'm really not happy about this.

The php script which reads the form data from the javascript thingie prints out the HTML/javascript used for the excercise...

Luckily I use Opera most of the time, or I would feel a bit awkward right now. Not that I usually have much sensitive data in my clipboard, but you never know when you might have come across a website with a hidden clipboard extractor like this (it doesn't have to auto-submit, it could of course be a part of a login procedure or something, with SQL insert statements instead of prints in the PHP...).

_________________
Idea for "cheap" card using P2040/41 running multiple OSes and/or SMP OSes.

Anyone interested?

 Status: Offline
Profile     Report this post  
amipal 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 14:45:14
#2 ]
Super Member
Joined: 8-Apr-2003
Posts: 1878
From: Worthing, West Sussex, UK

@olegil

Doesn't seem to work with IBrowse, which is a good thing! I'll give AWeb a go in a mo...

_________________
Good decisions are known right away; its the bad ones that take you time to realise.

 Status: Offline
Profile     Report this post  
olegil 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 15:57:33
#3 ]
Elite Member
Joined: 22-Aug-2003
Posts: 5416
From: Work

@amipal

Would be a bit strange if Amiga browsers were THAT compatible with IE

_________________
Idea for "cheap" card using P2040/41 running multiple OSes and/or SMP OSes.

Anyone interested?

 Status: Offline
Profile     Report this post  
tomazkid 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:11:43
#4 ]
Team Member
Joined: 31-Jul-2003
Posts: 11656
From: Kristianstad, Sweden

@olegil

Does not work with Firefox, but IE shows it all right .

_________________
Site admins are people too..pooff!

 Status: Offline
Profile     Report this post  
Laser 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:16:48
#5 ]
Regular Member
Joined: 19-Jul-2003
Posts: 333
From: Norwich, UK

@olegil

Effing piece of sh**!

I'm sick and tired of hearing Microsoft apologists saying how Windows is so big and complex that's why there are the occasional security holes. Rubbish. This is clearly a "feature" deliberately added with absolutely no appreciation for basic security considerations.

Thankfully, it doesn't seem to work in Firefox, which is what any sane person should be using by now (or other alt browsers).

 Status: Offline
Profile     Report this post  
Snuffy 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:27:37
#6 ]
Super Member
Joined: 25-Oct-2005
Posts: 1121
From: Michigan, USA

Hi @olegil

->"Try it out for yourself:

http://oeh.network-electronics.com/~olegil/clipboard.html

It's safe, I'm not storing anything. But if you don't trust me, make sure not
to have anything secret/sensitive in the copy/paste buffer....
________

I just checked with AWeb 3.5.7 and "Sorry, I don't have anything..."
Haha,...blitz...




_________________

 Status: Offline
Profile     Report this post  
MetalJoe 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:31:31
#7 ]
Regular Member
Joined: 7-Mar-2003
Posts: 464
From: Bucks UK

Yup, it's non-standard, IE only. I was hoping it had been removed by now, but guess I hoped too much.

I'm ashamed to say I actually *shudder* had to write a script that used this when I was at my first job. I can't for the life of me remember why, but I do remember kicking up a fuss about it and then deciding it was less hassle to put it in than argue with management about "trivial" things like browser compatibility, privacy etc. I have sworn never to cross into the dark side ever again.

_________________
Snowboarder, Airsofter, Programmer, Writer and AmigaOne XE G4 owner.
Experienced applications developer and part-time snowboard instructor

 Status: Offline
Profile     Report this post  
Seer 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:32:13
#8 ]
Team Member
Joined: 27-Jun-2003
Posts: 3725
From: The Netherlands

@Laser

This is clearly a "feature" deliberately added with absolutely no appreciation for basic security considerations.

It might be.. But then again, IE can tell almost everything else about your system to the web developer so that it can read the clipboard out, well I'm not really suprised.

BTW, works on IE7 beta as well so no change there.

Hm.. This seems like a standard java or PHP function, so why doesn't it work in Firefox ? Can I get the PHP source ? (note I'm no PHP programmer... I'm just curious)

_________________
~
Everything you say will be misquoted and used against you..
~

 Status: Offline
Profile     Report this post  
Seer 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:33:58
#9 ]
Team Member
Joined: 27-Jun-2003
Posts: 3725
From: The Netherlands

@MetalJoe

Yup, it's non-standard, IE only.

It's not ? Ok, thanks.

_________________
~
Everything you say will be misquoted and used against you..
~

 Status: Offline
Profile     Report this post  
bonkers 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 16:58:19
#10 ]
New Member
Joined: 15-Mar-2005
Posts: 9
From: Unknown

Doesn't get anything from Safari either.

 Status: Offline
Profile     Report this post  
Intuitioned 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 17:05:28
#11 ]
Super Member
Joined: 27-Oct-2003
Posts: 1340
From: Unknown

@olegil



Love it! Love it, in a that-is-so-f**king-stupid-whatever-next sort of way.

I use Safari most of the time.

Mine said,

Quote:
, &srcRect, m_pScreen, &dstRect




_________________

 Status: Offline
Profile     Report this post  
olegil 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 17:07:40
#12 ]
Elite Member
Joined: 22-Aug-2003
Posts: 5416
From: Work

@Seer

The PHP source is trivial. Just extract the value of the variable "content" as generated by the html form...

_________________
Idea for "cheap" card using P2040/41 running multiple OSes and/or SMP OSes.

Anyone interested?

 Status: Offline
Profile     Report this post  
olegil 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 17:12:35
#13 ]
Elite Member
Joined: 22-Aug-2003
Posts: 5416
From: Work

@Intuitioned

Hehe, obviously you have nothing to be ashamed of if you're writing GUI code


@thread
The reason I investigated this code is because it also managed to circumvent the "Block all popups" function in Opera. So I wanted to see how. I turned off everything and reloaded the page. Then I viewed the source. First thing that hit me was "hey, didn't that say _clipboard_? WTF?".

_________________
Idea for "cheap" card using P2040/41 running multiple OSes and/or SMP OSes.

Anyone interested?

 Status: Offline
Profile     Report this post  
alexw 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 17:54:58
#14 ]
Cult Member
Joined: 6-Mar-2004
Posts: 561
From: Saarbrücken, Germany

@olegil
Recently I was asked at my job if I could read an environment variable by a JavaScript. I said this is certainly not possible, because it would be a security risk and I was proved right by a bit of Googleing.
But this is even worse! Many people are copying passwords to the clipboard for not having to type them!
How stupid can the people at Microsoft be? Ok, they allowed scripts to be started by simply opening an email, which is even more stupid...
This company should be prohibited!

Alex.

_________________
Weighty message. You should to read.

 Status: Offline
Profile     Report this post  
DrBombcrater 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 18:36:41
#15 ]
Super Member
Joined: 6-Feb-2004
Posts: 1381
From: UK

@Laser


Quote:
I'm sick and tired of hearing Microsoft apologists saying how Windows is so big and complex that's why there are the occasional security holes. Rubbish. This is clearly a "feature" deliberately added with absolutely no appreciation for basic security considerations.

Features like this are logical enough when you consider what IE's sole purpose was for most of its life - a weapon to kill Netscape. The developer's main focus was simply to add as many features as possible in double-quick time, regardless of any side-effects, so that IE could do things Netscape Navigator couldn't, making it look like a better browser.

History records that this tactic worked brilliantly...

But now MS has to fix the pox-mess that is IE's code base in order to make it secure, while also out-featuring Mozilla/Firefox. I think they'd be better off scrapping it and building a new browser from scratch.

_________________
Who do you serve, and who do you trust? - Galen

 Status: Offline
Profile     Report this post  
wegster 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 19:48:46
#16 ]
Elite Member
Joined: 29-Nov-2004
Posts: 8554
From: RTP, NC USA

@olegil
That's sweet

Thanks Olegil. I've been wanting to spend a few days figuring out just how much info can be gotten from browsers as 'playing around.' Nice to know MS has out best interests in mind there as always

FireFox, epiphany, and konqueror all come up with nada here, not surprisingly.


_________________
Are we not done with the same silly arguments and flames yet??!

 Status: Offline
Profile     Report this post  
hnl_dk 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 20:05:03
#17 ]
Super Member
Joined: 25-Mar-2003
Posts: 1786
From: Denmark

@wegster

a good way to "steal" code from Microsoft... make a website with special interreset for Microsoft developers... and hope that they have a copy of most of their code in their clipboard And then it would even be their own fault

_________________
Best regards,
hnl_dk - Henning Nielsen Lund [Denmark]

Please send no PM to me, email me if you want to contact me. See you somewhere else.

 Status: Offline
Profile     Report this post  
wegster 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 21:07:02
#18 ]
Elite Member
Joined: 29-Nov-2004
Posts: 8554
From: RTP, NC USA

@hnl_dk
Meh- M$ code not worth anything

_________________
Are we not done with the same silly arguments and flames yet??!

 Status: Offline
Profile     Report this post  
Seer 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 21:09:10
#19 ]
Team Member
Joined: 27-Jun-2003
Posts: 3725
From: The Netherlands

@wegster

Meh- M$ code not worth anything

Not even learning material ?






How not to do it...

Last edited by Seer on 19-Nov-2005 at 09:09 PM.

_________________
~
Everything you say will be misquoted and used against you..
~

 Status: Offline
Profile     Report this post  
wegster 
Re: So websites can read my clipboard?
Posted on 19-Nov-2005 21:10:20
#20 ]
Elite Member
Joined: 29-Nov-2004
Posts: 8554
From: RTP, NC USA

@olegil
Hmm, this WOULD be a fun thing to publicize and then post to slashdot, now that I think of it

_________________
Are we not done with the same silly arguments and flames yet??!

 Status: Offline
Profile     Report this post  
Goto page ( 1 | 2 | 3 Next Page )

[ home ][ about us ] [ forums ][ classifieds ] [ links ][ news archive ] [ link to us ][ user account ]
Copyright © 2000 - 2011 Amigaworld.net.

Page took 0.179679 seconds to load.