Bitcoin Forum
May 27, 2024, 01:49:09 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [ Need ] Application to prevent Clipboard Hijacking  (Read 291 times)
Kakmakr (OP)
Legendary
*
Offline Offline

Activity: 3444
Merit: 1958

Leading Crypto Sports Betting & Casino Platform


View Profile
July 07, 2017, 06:35:50 AM
 #1

How can we solve the problem with Clipboard Hijacking, without having to advise people to update their Anti-virus software? Here is a typical example : https://bitcointalk.org/index.php?topic=2005574.msg19966919#msg19966919 of once such an event.

I know some Anti-virus companies disable the Copy/Paste option in a secure browser for all HTTPS sites, but this is not the ideal solution, because you then have to type out the Bitcoin address and this will cause more problems with people making typo errors and losing their bitcoins.

If you want to add to the discussion and only suggest that the Anti-virus must be updated, then please rather move on to another thread. This is not the answer we are looking for.

We have loads of talented developers out there that can solve this problem. What do you suggest?

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
krishnapramod
Legendary
*
Offline Offline

Activity: 1470
Merit: 1078


View Profile
July 07, 2017, 07:31:20 AM
 #2

How can we solve the problem with Clipboard Hijacking, without having to advise people to update their Anti-virus software? Here is a typical example : https://bitcointalk.org/index.php?topic=2005574.msg19966919#msg19966919 of once such an event.

I know some Anti-virus companies disable the Copy/Paste option in a secure browser for all HTTPS sites, but this is not the ideal solution, because you then have to type out the Bitcoin address and this will cause more problems with people making typo errors and losing their bitcoins.

If you want to add to the discussion and only suggest that the Anti-virus must be updated, then please rather move on to another thread. This is not the answer we are looking for.

We have loads of talented developers out there that can solve this problem. What do you suggest?

There is an extension in Chrome "Kill evil" to prevent clipboard hijacking.

Quote
Prevent printing, selection spying, unwanted tabs, etc.

Mercilessly removes or disables the following annoyances on all pages (except those you whitelist):

oncut/copy/paste (another way pages can try to interfere with your clipboard)

WARNING: this extension is a blunt instrument. You may need to use the whitelist for pages that it breaks. If you're installing it at all, I assume you know what you're looking for and understand the implications.

https://chrome.google.com/webstore/detail/kill-evil/epieehnpcepgfiildhdklacomihpoldk/related

In Firefox, you can add Noscript add-on to disable JavaScript or by disabling clipboard events, https://addons.mozilla.org/en-US/firefox/addon/noscript/

I think Adblock Plus can also prevent clipboard hijacking to some extent, but would not work on an adblocker website.

The safe bet is to just keep the antivirus up-to-date.
BrewMaster
Legendary
*
Offline Offline

Activity: 2114
Merit: 1292


There is trouble abrewing


View Profile
July 07, 2017, 02:43:18 PM
 #3

i can only think of work arounds like these:
1. open task manager and find the trojan and do a end process. sometimes it works on some of them and they don't come back.

2. since it only changes bitcoin addresses not other copied data, if it was possible you can always add some arbitrary data to the address you copy. like adding "abcd in the middle so it becomes an invalid address and then after pasting remove "abcd".

3. use BIP21, you just click the link and it automatically opens your wallet and fills in the blanks. this needs to be tested but i doubt it can be affected by that trojan. it will look like this
https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki

There is a FOMO brewing...
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!