I just read this on Carl Franklin’s blog and wanted to pass this along…

Apparently, the default Internet Explorer 6 settings allow websites to view what’s on your clipboard.  While this can seem trivial, it can be a big problem if you ever copy passwords or other secrets to your clipboard in the course of an average day.

The fix is quite easy.  Go to “Tools” > “Internet Options”, select the “Security” tab, click the “Internet” zone, and click [Custom Level...].  Toward the bottom of the list, under “Scripting”, change “Allow paste operations via script” to either “Prompt” or “Disable”.