Google Chrome bug could let dodgy websites mess with your clipboard

Date:
Thu, 01 Sep 2022 18:59:45 +0000

Description:
The current and live version of Chrome could be putting your security at
risk, report warns.

FULL STORY ======================================================================

The current, live version of Google Chrome - version 104 - saw the introduction of a bug that could compromise your sensitive data.

Normally, clipboard writing event must be approved by a user, however the
bug, found by security expert Jeff Johnson , has been found to have removed this requirement.

Many of us use our clipboard tens or hundreds of times a day for copying and pasting information from one location to another, and some of this
information could contain sensitive information like phone numbers,
addresses, passwords and login details, and even payment information. Chrome clipboard bug

Johnson fears that scams based on this defect could be used to lure users
into copying their wallet address into the system clipboard on fake cryptocurrency sites, which could place a risk on an entire digital wallet.

He warns that Googles web browser isnt the only one to use such a system; the same source indicates that Safari and Firefox also allow web pages to write
to the system clipboard, but they have gesture-based protections to provide
an element of security.

Johnson summarises the lack of adequate safeguards against protecting system clipboards across all applicable web browsers. Read more

Compare the best firewall services

A mystery bug is causing Google Chrome extensions to suddenly fail

Malicious Google Chrome extensions installed on more than one million

devices

The most commonly used user gesture is Ctrl+C (or Cmd+C for Mac users), however he found that simply pressing the down arrow key to scroll through a website was enough to give sites permission to the computer clipboard.

Handily, there are sites to check whether you are affected. One such site is webplatform.news , which when visited, may be able to add to your clipboard. All you need to do is visit the site and paste whatever may be in your clipboard into a blank space like a new Word document. If you see the following, the browser youre using is putting your security at compromise:

Hello, this message is in your clipboard because you visited the website Web Platform News in a browser that allows websites to write to the clipboard without the users permission. Sorry for the inconvenience. For more information about this issue, see https://github.com/w3c/clipboard-apis/issues/182.

Googles team of Chrome developers is aware of the issue, however a fix is yet to be found. These are the best ID theft protection tools

Via Bleeping Computer



======================================================================
Link to news story: https://www.techradar.com/news/google-chrome-bug-could-let-dodgy-websites-mess -with-your-clipboard/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)