News for hackers. Stuff that matters.

A comment on Pastejacking. Parent comment

Re:Pastejacking by logicallee on Monday May 23, 2016 @11:28PM (#11758790)
The proof of concept didn't work for me. I highlighted the text, right-clicked and clicked "copy". I thought it was just broken or not hooking the on-copy properly.

Then I realized that the reason I was doing that instead of ctrl-c is all the times that web sites break ctrl-c. I literally have gotten used to highlighting, right-clicking, and clicking copy, for a "clean" copy :) I wasn't even aware I was doing this.

Of course, web sites can hook right-clicks. It would be funny if they threw up a fake context menu matching the default context menu of the browser and operating you're using, but with evil versions of commands :)

I don't disable or modify javascript, so with that addition it would have tricked me.

[ Parent | on HN ]
Re:Pastejacking by jschwartzi on Monday May 23, 2016 @11:46PM (#11758852)
Right-click hooking could be defeated by inserting a sequence number in the right-click menu and displaying the same sequence number somewhere in the browser window.

I will say that the people who generate event hooks in browsers need to pull their heads out of their asses before this kind of thing becomes necessary.

[ Parent | on HN ]
Re:Pastejacking by dzhiurgis on Tuesday May 24, 2016 @12:18AM (#11758963)
Highlight, then Edit -> Copy.

But then, I've seen sites that break highlighting. Either intentionally, or accidentally, thinking people will share their every highlight on Twitter (I am looking at you, Medium).

[ Parent | on HN ]
Re:Pastejacking by qb45 on Tuesday May 24, 2016 @06:05AM (#11760168)
In Firefox, holding CTRL or SHIFT (don't remember which one) bypasses JS hooks and always displays the menu. I think it's even better solution :)
[ Parent | on HN ]