5 ms·
copying and pasting seems to be a vulnerability..especially if you get distracted for a moment, or haven't had your coffee and paste it into your search bar.
by SubiculumCode 10y ago
copying and pasting seems to be a vulnerability..especially if you get distracted for a moment, or haven't had your coffee and paste it into your search bar.
- bqe 10y agoIt's a risk, albeit a small one. Individual passwords are easy to change if compromised. I have personally never miscopied them. Both pass and KeePass will automatically clear your clipboard a little while after copying the password. However, losing every single password at once, without your knowledge, direct to an adversary due to a LastPass vulnerability is a much more severe problem.
- deleted 10y ago[deleted]
- OJFord 10y agoIf you paste a long, random password in your search bar, what's going to happen in the time between then and changing it?
- AdmiralAsshat 10y agoIn Firefox, I believe there's a way to turn off asynchronous searching so that it won't attempt to search as you're typing. Even though DuckDuckGo is my search provider, I have that enabled anyway; I figure I'm okay with having to press ENTER to see results as a trade-off for not having my data sent to someone as soon as I start typing. Not sure if this is an option in Chrome/Chromium.
- mixedCase 10y agoWhile I don't use pass, KeePassXC and KeePassDroid clear the clipboard shortly after use.
- cookiecaper 10y agoYep, KeePass has a (too short) default timeout to erase the password from the clipboard, I think it's something like 10 seconds? I increased it to 90 seconds.
- sprucely 10y agoKeePass also has a handy feature that bypasses the clipboard and sends {username}{tab}{password}{enter} keystrokes directly to the browser window. The keystrokes can also be customized per web page.