[tor-bugs] #13014 [- Select a component]: copy and paste trick could be used to deanonymise users

Mon Sep 1 15:00:02 UTC 2014

#13014: copy and paste trick could be used to deanonymise users
----------------------------------+---------------------
 Reporter:  cypherpunks           |          Owner:
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:
Component:  - Select a component  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------
 [http://thejh.net/misc/website-terminal-copy-paste This website]
 demonstrates a trick that could easily be used to deanonymise users by
 tricking them into copying malicious commands into the clipboard.

 Mitigating this threat might be difficult, one way would be to display a
 notification containing the contents of the clipboard whenever something
 is copied.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13014>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online