📅 February 2006

The other day I wrote about the clipboard reading code in IE, I found another example that someone else had made that used different code but had the same effect. They also had a fix. I would suggest doing this. It is probably why e:ajays computer didn't report anything. But the default is to have it turned on.

1. Under the Tools menu, select Internet Options

2. Click on the Security tab.

3. In the box labelled, "Security level for this zone", click on Custom Level

4. Scroll all the way down to the Scripting heading

5. Under "Allow paste operations via script" choose the Disable button.

6. Click OK and confirm that Yes you do want to change security settings for this zone.

I just accidentally discovered a major security bug in IE for windows. Copy something into your cliboard from any application and then visit this page I created. The data will be alerted and although I am not collecting the data anyone could use this technology to steal and forward whatever information was in your clipboard when you visited their web page. Just think about what you copy into your clipboard when using IE, your passwords, your bank account info, etc. Get firefox

--paul

Camino 1.0 brings you a heavily-updated version of the only native Mac OS X browser using Mozilla's Gecko rendering engine. Thousands of bugs were fixed in Gecko 1.8, providing users with improved web page compatibility.

more info: