Google Chrome bug could let dodgy websites mess with your clipboard

The current, live version of Google Chrome - version 104 - saw the introduction of a bug that could compromise your sensitive data. Norma...

The current, live version of Google Chrome - version 104 - saw the introduction of a bug that could compromise your sensitive data.

Normally, clipboard writing event must be approved by a user, however the bug, found by security expert Jeff Johnson, has been found to have removed this requirement.

Many of us use our clipboard tens or hundreds of times a day for copying and pasting information from one location to another, and some of this information could contain sensitive information like phone numbers, addresses, passwords and login details, and even payment information.

Chrome clipboard bug

Johnson fears that scams based on this defect could be used to lure users into copying their wallet address into the system clipboard on fake cryptocurrency sites, which could place a risk on an entire digital wallet.

He warns that Google’s web browser isn’t the only one to use such a system; the same source indicates that Safari and Firefox also “allow web pages to write to the system clipboard”, but they have gesture-based protections to provide an element of security.

Johnson summarises the lack of adequate safeguards against protecting system clipboards across all applicable web browsers.

The most commonly used user gesture is Ctrl+C (or Cmd+C for Mac users), however he found that simply pressing the down arrow key to scroll through a website was enough to give sites permission to the computer clipboard.

Handily, there are sites to check whether you are affected. One such site is webplatform.news, which when visited, may be able to add to your clipboard. All you need to do is visit the site and paste whatever may be in your clipboard into a blank space like a new Word document. If you see the following, the browser you’re using is putting your security at compromise:

“Hello, this message is in your clipboard because you visited the website Web Platform News in a browser that allows websites to write to the clipboard without the user’s permission. Sorry for the inconvenience. For more information about this issue, see https://github.com/w3c/clipboard-apis/issues/182.”

Google’s team of Chrome developers is aware of the issue, however a fix is yet to be found.

Via Bleeping Computer



from TechRadar - All the latest technology news https://ift.tt/7teBk6l
via IFTTT

COMMENTS

BLOGGER
Name

Apps,3857,Business,150,Camera,1155,Earn $$$,2,Gadgets,1740,Games,926,GTA,1,Innovations,2,Mobile,1696,Paid Promotions,4,Promotions,4,Sports,1,Technology,7961,Trailers,796,Travel,37,Trending,3,Trendly News,24425,TrendlyNews,1,Video,5,XIAOMI,13,YouTube - 9to5Google,1,
ltr
item
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews: Google Chrome bug could let dodgy websites mess with your clipboard
Google Chrome bug could let dodgy websites mess with your clipboard
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews
http://www.trendlynews.in/2022/09/google-chrome-bug-could-let-dodgy.html
http://www.trendlynews.in/
http://www.trendlynews.in/
http://www.trendlynews.in/2022/09/google-chrome-bug-could-let-dodgy.html
true
3372890392287038985
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share. STEP 2: Click the link you shared to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy