Bitcoin Forum

Bitcoin => Project Development => Topic started by: Kakmakr on July 07, 2017, 06:35:50 AM



Title: [ Need ] Application to prevent Clipboard Hijacking
Post by: Kakmakr on July 07, 2017, 06:35:50 AM
How can we solve the problem with Clipboard Hijacking, without having to advise people to update their Anti-virus software? Here is a typical example : https://bitcointalk.org/index.php?topic=2005574.msg19966919#msg19966919 of once such an event.

I know some Anti-virus companies disable the Copy/Paste option in a secure browser for all HTTPS sites, but this is not the ideal solution, because you then have to type out the Bitcoin address and this will cause more problems with people making typo errors and losing their bitcoins.

If you want to add to the discussion and only suggest that the Anti-virus must be updated, then please rather move on to another thread. This is not the answer we are looking for.

We have loads of talented developers out there that can solve this problem. What do you suggest?


Title: Re: [ Need ] Application to prevent Clipboard Hijacking
Post by: krishnapramod on July 07, 2017, 07:31:20 AM
How can we solve the problem with Clipboard Hijacking, without having to advise people to update their Anti-virus software? Here is a typical example : https://bitcointalk.org/index.php?topic=2005574.msg19966919#msg19966919 of once such an event.

I know some Anti-virus companies disable the Copy/Paste option in a secure browser for all HTTPS sites, but this is not the ideal solution, because you then have to type out the Bitcoin address and this will cause more problems with people making typo errors and losing their bitcoins.

If you want to add to the discussion and only suggest that the Anti-virus must be updated, then please rather move on to another thread. This is not the answer we are looking for.

We have loads of talented developers out there that can solve this problem. What do you suggest?

There is an extension in Chrome "Kill evil" to prevent clipboard hijacking.

Quote
Prevent printing, selection spying, unwanted tabs, etc.

Mercilessly removes or disables the following annoyances on all pages (except those you whitelist):

oncut/copy/paste (another way pages can try to interfere with your clipboard)

WARNING: this extension is a blunt instrument. You may need to use the whitelist for pages that it breaks. If you're installing it at all, I assume you know what you're looking for and understand the implications.

https://chrome.google.com/webstore/detail/kill-evil/epieehnpcepgfiildhdklacomihpoldk/related

In Firefox, you can add Noscript add-on to disable JavaScript or by disabling clipboard events, https://addons.mozilla.org/en-US/firefox/addon/noscript/

I think Adblock Plus can also prevent clipboard hijacking to some extent, but would not work on an adblocker website.

The safe bet is to just keep the antivirus up-to-date.


Title: Re: [ Need ] Application to prevent Clipboard Hijacking
Post by: BrewMaster on July 07, 2017, 02:43:18 PM
i can only think of work arounds like these:
1. open task manager and find the trojan and do a end process. sometimes it works on some of them and they don't come back.

2. since it only changes bitcoin addresses not other copied data, if it was possible you can always add some arbitrary data to the address you copy. like adding "abcd in the middle so it becomes an invalid address and then after pasting remove "abcd".

3. use BIP21, you just click the link and it automatically opens your wallet and fills in the blanks. this needs to be tested but i doubt it can be affected by that trojan. it will look like this (bitcoin:175tWpb8K1S7NmH4Zx6rewF9WQrcZv245W?amount=20.3&label=DontStealMyCoins)
https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki