Code Poets, HAIL! Need your gorgeous thoughts re using #JavaScript event listeners to flip content of an #HTML element for malicious exploits. Seems way too easy, with the copying and the pasting, oh my! Help reality check me, peas and carrots, thxu 🥕 😛bleepingcomputer.com/news/se…

Don't copy-paste commands from webpages — you can get hacked

Programmers, sysadmins, security researchers, and tech hobbyists copying-pasting commands from web pages into a console or terminal risk having their system compromised. Wizer's Gabriel Friedlander...

bleepingcomputer.com
3
3
3
Happy New Year, Molly! I think it’s not so much a problem of event listeners as it is with the Clipboard API. Reminds me of HTML email hacks that display a legit URL, but the href value is to something malicious. Email clients had to step in and detect mismatches in that case.
2
1
Replying to @StolleyDotDev
Thanks Karl! I appreciate the info on the clipboard API,,which I admittedly have not studied or used to any applied degree myself. Happy happy to you, cheers 🥂

Jan 4, 2022 · 5:32 PM UTC

1
Replying to @mholzschlag
My pleasure Molly!!! I’m going to add the post you shared to my material on dark patterns for a Web & HCI class I’m teaching this term. Thank you so much!
1
1
Cool! What goes around as they say ;-) - I've revamped my book and have the "go forth" okay so have been in a writing groove agani. Yay! Glad to hear you're back to teaching - F2F or are you Covid-distanced?
1
more replies