[tor-bugs] #13014 [- Select a component]: copy and paste trick could be used to deanonymise users

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#13014: copy and paste trick could be used to deanonymise users
----------------------------------+---------------------
 Reporter:  cypherpunks           |          Owner:
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:
Component:  - Select a component  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------
 [http://thejh.net/misc/website-terminal-copy-paste This website]
 demonstrates a trick that could easily be used to deanonymise users by
 tricking them into copying malicious commands into the clipboard.

 Mitigating this threat might be difficult, one way would be to display a
 notification containing the contents of the clipboard whenever something
 is copied.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13014>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs