Questions tagged [clipboard]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
62 views

Can phone apps edit my clipboard?

This is a question similar to this one but it is all about editing the clipboard contents. Can phone apps read my clipboard? Is this actually a case on latest API of Android an iOS? I mean ...
0
votes
0answers
132 views

Securing Clipboard Memory

Sometimes sensitive data is copied from/to processes and external devices like (long)passwords, usernames and so forth , but also often people don't get this always in mind and forget to clean that ...
3
votes
1answer
126 views

Is copying passwords to iOS clipboard secure?

Since apps on iOS can access the clipboard should I worry about it when copying passwords from the keychain? I do that when AutoFill feature doesn't work so I would not have to manually retype ...
2
votes
1answer
129 views

Can any Android apps log my clipboard and upload it to their server without my permission? [duplicate]

Everyday we copy paste texts that are sometime very important and we don't want anyone to see that. Can any Android app log our clipboard and upload it to their server without my permission? I have ...
0
votes
1answer
79 views

mRemoteNG monitoring the clipboard constantly?

Using mRemoteNG 1.75.7012.16814 and Password Depot 11 on Windows 10. The issue: If mRemoteNG is running, and I copy a password from Password Depot to the clipboard, I get this message from Password ...
1
vote
2answers
68 views

Is it possible to restrict clipboard access to specific processes?

I'm not sure if somebody has implemented this before, but I think it'd be helpful if we can make certain clipboard messages only available to specific processes if they are not meant to be public. Is ...
3
votes
2answers
142 views

What protections exist on operating system clipboards?

This is an operating system agnostic question. We are recommended to use password managers which encourage us to copy and paste our passwords. What protections exist if any to say a malicious website ...
4
votes
3answers
694 views

Keyboard vs clipboard password manager threat models

A password manager (like KeePass) offers you the option to copy and paste your password (the clipboard is cleared after pasting/timeout) or to emulate a keyboard and "type" the password for the user. ...
80
votes
2answers
10k views

Can phone apps read my clipboard?

Via Hacker News, I came across a Tweet implying that Facebook's iOS app routinely reads and transmits all content from the user's pasteboard. Leaving aside whether Facebook's app genuinely does this (...
3
votes
2answers
1k views

Is the macOS Universal Clipboard secure?

Since the introduction of Universal Clipboard on Apple's operating systems, I've found myself increasingly relying on it to paste passwords and authentication codes from my MacBook to my iPhone and ...
2
votes
2answers
501 views

Is LastPass' Formfill inherently compromised?

Is there any sort of documentation to verify that the user info inputted with automatic formfill on "Secure forms" is protected from theft by a keylogger or trojan collecting clipboard data? I ask ...
2
votes
2answers
139 views

Paste-once or paste-and-clear [closed]

I use a password manager (to be specific: pass) to store my passwords. The interface I use most often is passmenu to put the password on my clipboard, which I can then paste in my terminal/browser/...
5
votes
3answers
983 views

Is there a clipboard timeout?

The "clipboard" buffer might contain sensitive information (like passwords, or private messages sent to or received from other people) cut/copied previously, that, wenn accidentally pasted into a ...
11
votes
1answer
849 views

Universal clipboard iOS10 and macOS. How secure?

New iOS10 and macOS Sierra has a feature called universal clipboard. You can copy something (text, image) on one device and paste it on another. How secure is it and does that mean that everything ...
0
votes
1answer
196 views

If a malware/virus can insert from clipboard to a webbrowser form, than can it insert key presses too?

Question: If a malware can insert from the clipboard a password to a webform in a webbrowser, than can it "in general" insert key presses too? Related to password fields, that disabled the clipboard ...
1
vote
1answer
863 views

Does KDE System Tray Extra Items “Clipboard” have the same security threats as the system clipboard?

Does the clipboard under kUbuntu's KDE System Tray > Extra Items "Clipboard" have the same security threats as the system clipboard? The following articles point out the insecure nature of the ...
2
votes
1answer
1k views

Copy-and-pasting plaintext data from encrypted container

Suppose we have sensitive information stored in plaintext within a dm-crypt/VeraCrypt encrypted file and this information is copy-and-pasted by a user into a web browser after decrypting (this could ...
9
votes
2answers
987 views

Best practices when forwarding an email or copy / pasting from confidential information sources?

I get asked this a lot from older people, or for legal matters. They want to forward an email message they've received to another party, while removing any identifying information from the first party ...
2
votes
1answer
233 views

Is drag-and-drop safer than using the clipboard when it comes to protecting sensitive data from keyloggers?

I noticed that multiple password-locker applications recommend that you use the drag-and-drop feature to transfer passwords to login forms instead of copying the passwords to the clipboard or having ...
5
votes
2answers
447 views

Possible way to extract sudo password from running system via the clipboard

I use to copy and paste my sudo password from a KeePass file so I guess the plain text user password will be saved in RAM at some point when I use it, for example, to accept an update. Is that right? ...
1
vote
1answer
410 views

is copy pasting sudo password from opened document a possible vulnerability?

During setup of my ubuntu systems after installing the system offline i open a textfile and change my sudo password by typing it into a textfile and paste it after so that i don't lock myself out by ...
3
votes
1answer
182 views

(Why) should the clipboard be cleared when it contains content from a closed program?

Some operating systems resp. desktop managers clear copied content from the clipboard when the "source" program gets closed. Example: copy (Ctrl+c) some text from a webpage in your browser close the ...
174
votes
7answers
11k views

How can I protect myself from this kind of clipboard abuse?

Clipboard abuse from websites Many websites use JavaScript or CSS to stealthily insert or replace text in the user's clipboard whenever they copy information from the page. As far as I know this is ...
45
votes
3answers
12k views

Is a password in the clipboard vulnerable to attacks?

I see situations where you may have to input the same password more than once. You may type it in a text editor and copy it to clipboard, to paste it two or more times. In what scenarios this could ...
0
votes
1answer
789 views

How to use clipboard manager software more securely?

I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option. These programs usually ...
2
votes
1answer
155 views

Possible to redact information in the clipboard, or to auto-redact when it hits a webpage?

Sometimes when I paste information to a website I realize after I post the information that I inadvertently included an IP address, username, email address, or other information I'd like to consider ...
4
votes
4answers
13k views

What is the threat of having the clipboard enabled on Citrix and other rdp?

It is a question I have had for some time which I have never received a solid answer on. It seems most infosec teams prefer to disable clipboard functionality on Citrix and other RDP setups. What is ...
14
votes
5answers
2k views

Is clipboard secure?

Can a browser get the data on my clipboard? Data could be for example my temporary password? Any browser or operating system that allows this?