Wednesday, February 2, 2011

Please do not use "Ctrl+c" to copy sensitive data


Dear Friends,

Please do not use "Ctrl+c" to copy sensitive data when you are connected
to net. We do copy various data by Ctrl+c for pasting elsewhere. This
copied data is stored in clipboard and is accessible from the net by a
combination of Javascripts and ASP. Do not keep sensitive data (like
credit card numbers, bank login/passwords, PIN, date of births, etc.) in
the clipboard while surfing the web. Instead make a practice of typing
them always. It is extremely easy to extract the text stored in the
clipboard to steal
your sensitive information. (remember that our cyber laws are not
stringent enough!!).

Just try this to believe yourself,

1) Copy any text by Ctrl+c
2) Now, click the Link:


http://www.friendly canadian.com/applications/clipboard.htm


3) You will see the SAME text you copied is accessed by this webpage.

How to Prevent
=================
Got this tip from one of my friends and it works.....
But still we should be careful in using Ctrl+c to copy sensitive data
when connected to net.

Solution:
To prevent this from happening in Internet Explorer,
a. Tools Internet Options Security
b. For Internet, Custom Level Scripting, Disable
"Allow paste operations via script"

And also disable Auto Complete option:

1. Open IE browser
2. Go to Internet Options in Tools Menu.
3. Click on the Content Tab
4. Click on Auto complete
5. Uncheck all the Check Boxes and click "Clear Forms and Clear Passwords".

0 comments:

Post a Comment