Slashdot Mirror

An anonymous reader writes: "It has been possible for a long time for developers to use CSS to append malicious content to the clipboard without a user noticing and thus fool them into executing unwanted terminal commands," writes Softpedia. "This type of attack is known as clipboard hijacking, and in most scenarios, is useless, except when the user copies something inside their terminal." Security researcher Dylan Ayrey published a new version of this attack last week, which uses only JavaScript as the attack medium, giving the attack more versatility and making it now easier to carry out. The attack is called Pastejacking and it uses Javascript to theoretically allow attackers to add their malicious code to the entire page to run commands behind a user's back when they paste anything inside the console. "The attack can be deadly if combined with tech support or phishing emails," writes Softpedia. "Users might think they're copying innocent text into their console, but in fact, they're running the crook's exploit for them."

greg65535 (1209048) writes "Following the trend of on-line coding playgrounds like JSFiddle or CodePen, Google researchers unveiled the first browser-based, GPU-powered Quantum Computing Playground. With a typical GPU card you can simulate up to 22 qubits, write, debug, and share your programs, visualize the quantum state in 2D and 3D, see quantum factorization and quantum search in action, and even... execute your code backwards."

An anonymous reader writes "The site Python Fiddle, like the similarly named jsFiddle, allows users to post code and share it with others. However, unlike jsfiddle, pythonfiddle brings a major advancement with the Python language, which fully runs in the browser."