Bitcoin Forum
August 22, 2019, 03:02:08 PM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [ Need ] Application to prevent Clipboard Hijacking  (Read 250 times)
Kakmakr
Legendary
*
Offline Offline

Activity: 1750
Merit: 1340

★ ChipMixer | Bitcoin mixing service ★


View Profile
July 07, 2017, 06:35:50 AM
 #1

How can we solve the problem with Clipboard Hijacking, without having to advise people to update their Anti-virus software? Here is a typical example : https://bitcointalk.org/index.php?topic=2005574.msg19966919#msg19966919 of once such an event.

I know some Anti-virus companies disable the Copy/Paste option in a secure browser for all HTTPS sites, but this is not the ideal solution, because you then have to type out the Bitcoin address and this will cause more problems with people making typo errors and losing their bitcoins.

If you want to add to the discussion and only suggest that the Anti-virus must be updated, then please rather move on to another thread. This is not the answer we are looking for.

We have loads of talented developers out there that can solve this problem. What do you suggest?

1566486128
Hero Member
*
Offline Offline

Posts: 1566486128

View Profile Personal Message (Offline)

Ignore
1566486128
Reply with quote  #2

1566486128
Report to moderator
1566486128
Hero Member
*
Offline Offline

Posts: 1566486128

View Profile Personal Message (Offline)

Ignore
1566486128
Reply with quote  #2

1566486128
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1566486128
Hero Member
*
Offline Offline

Posts: 1566486128

View Profile Personal Message (Offline)

Ignore
1566486128
Reply with quote  #2

1566486128
Report to moderator
1566486128
Hero Member
*
Offline Offline

Posts: 1566486128

View Profile Personal Message (Offline)

Ignore
1566486128
Reply with quote  #2

1566486128
Report to moderator
1566486128
Hero Member
*
Offline Offline

Posts: 1566486128

View Profile Personal Message (Offline)

Ignore
1566486128
Reply with quote  #2

1566486128
Report to moderator
krishnapramod
Legendary
*
Offline Offline

Activity: 1456
Merit: 1071


View Profile
July 07, 2017, 07:31:20 AM
 #2

How can we solve the problem with Clipboard Hijacking, without having to advise people to update their Anti-virus software? Here is a typical example : https://bitcointalk.org/index.php?topic=2005574.msg19966919#msg19966919 of once such an event.

I know some Anti-virus companies disable the Copy/Paste option in a secure browser for all HTTPS sites, but this is not the ideal solution, because you then have to type out the Bitcoin address and this will cause more problems with people making typo errors and losing their bitcoins.

If you want to add to the discussion and only suggest that the Anti-virus must be updated, then please rather move on to another thread. This is not the answer we are looking for.

We have loads of talented developers out there that can solve this problem. What do you suggest?

There is an extension in Chrome "Kill evil" to prevent clipboard hijacking.

Quote
Prevent printing, selection spying, unwanted tabs, etc.

Mercilessly removes or disables the following annoyances on all pages (except those you whitelist):

oncut/copy/paste (another way pages can try to interfere with your clipboard)

WARNING: this extension is a blunt instrument. You may need to use the whitelist for pages that it breaks. If you're installing it at all, I assume you know what you're looking for and understand the implications.

https://chrome.google.com/webstore/detail/kill-evil/epieehnpcepgfiildhdklacomihpoldk/related

In Firefox, you can add Noscript add-on to disable JavaScript or by disabling clipboard events, https://addons.mozilla.org/en-US/firefox/addon/noscript/

I think Adblock Plus can also prevent clipboard hijacking to some extent, but would not work on an adblocker website.

The safe bet is to just keep the antivirus up-to-date.
BrewMaster
Hero Member
*****
Offline Offline

Activity: 1274
Merit: 775


There is trouble abrewing


View Profile
July 07, 2017, 02:43:18 PM
 #3

i can only think of work arounds like these:
1. open task manager and find the trojan and do a end process. sometimes it works on some of them and they don't come back.

2. since it only changes bitcoin addresses not other copied data, if it was possible you can always add some arbitrary data to the address you copy. like adding "abcd in the middle so it becomes an invalid address and then after pasting remove "abcd".

3. use BIP21, you just click the link and it automatically opens your wallet and fills in the blanks. this needs to be tested but i doubt it can be affected by that trojan. it will look like this
https://github.com/bitcoin/bips/blob/master/bip-0021.mediawiki

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!