3 ms·

Browsers use it to help you with the copied links. When you click into the URL bar they offer you to jump to the previously copied link right away.

aaomidi 7y ago
Should be a permission.
- toyg 7y ago
  I don’t disagree but the overflowing of permission prompts is how we get people just clicking Yes to everything. There is a balance. Location services are worth of a permission, but the clipboard seems a bit on the trivial side of things. Then again, people paste passwords, so...
  - walterbell 7y ago
    The permissions can be unidrectional, e.g. password manager grants permission to a specific app for the next N seconds. Similar to "add photo" permission.
    - saagarjha 7y ago
      How would the password manager know which app you’re going to paste the password into?
      - walterbell 7y ago
        The OS could provide a whitelisting API and an "app picker" to the user. The password manager app itself need not know the destination app, the OS could manage the binding. The password manager could invoke an OS API to create each association, with user-OS input for app selection. This whitelist approach would be similar to SE Linux or other mandatory access control systems. This kind of inter-app policy could also be useful for opening URLs, e.g. open all URLs from untrusted app A in Brave browser where Javascript can be easily whitelisted on a per-site basis.
  - bigiain 7y ago
    > Then again, people paste passwords, so. It’s more serious than that, current security best practice is telling everybody to use a password manager. People are being told that pasting passwords is “the right way to do things”. And that behaviour (at least for me) has morphed into keeping account numbers, credit card numbers, and other important private information in the password manager, and copy pasting those when I need to. (1Password on Mac seems to have a trick where it empties the clipboard after a certain amount of time, I’ve noticed that occasionally when a password I’d copied a little while ago isn’t still in the clipboard when I try to paste it. I haven’t been quite curious enough to look into it. Yet...)
    - deleted 7y ago
      [deleted]
    - Marsymars 7y ago
      > 1Password on Mac seems to have a trick where it empties the clipboard after a certain amount of time, I’ve noticed that occasionally when a password I’d copied a little while ago isn’t still in the clipboard when I try to paste it. I haven’t been quite curious enough to look into it. Yet... I think this is pretty standard. KeePass makes it immediately obvious as it has a bar on the bottom of the window that starts a 12-second decrement when you copy a password.
    - saagarjha 7y ago
      https://developer.apple.com/documentation/uikit/uipasteboard/optionskey/1829414-expirationdate https://developer.apple.com/documentation/uikit/uipasteboard...
cortesoft 7y ago
I think just saying "paste and go" is fine, they don't need to know where it is going before I click yes

aaomidi 7y ago

Should be a permission.

toyg 7y ago
I don’t disagree but the overflowing of permission prompts is how we get people just clicking Yes to everything. There is a balance. Location services are worth of a permission, but the clipboard seems a bit on the trivial side of things. Then again, people paste passwords, so...
- walterbell 7y ago
  The permissions can be unidrectional, e.g. password manager grants permission to a specific app for the next N seconds. Similar to "add photo" permission.
  - saagarjha 7y ago
    How would the password manager know which app you’re going to paste the password into?
    - walterbell 7y ago
      The OS could provide a whitelisting API and an "app picker" to the user. The password manager app itself need not know the destination app, the OS could manage the binding. The password manager could invoke an OS API to create each association, with user-OS input for app selection. This whitelist approach would be similar to SE Linux or other mandatory access control systems. This kind of inter-app policy could also be useful for opening URLs, e.g. open all URLs from untrusted app A in Brave browser where Javascript can be easily whitelisted on a per-site basis.
- bigiain 7y ago
  > Then again, people paste passwords, so. It’s more serious than that, current security best practice is telling everybody to use a password manager. People are being told that pasting passwords is “the right way to do things”. And that behaviour (at least for me) has morphed into keeping account numbers, credit card numbers, and other important private information in the password manager, and copy pasting those when I need to. (1Password on Mac seems to have a trick where it empties the clipboard after a certain amount of time, I’ve noticed that occasionally when a password I’d copied a little while ago isn’t still in the clipboard when I try to paste it. I haven’t been quite curious enough to look into it. Yet...)
  - deleted 7y ago
    [deleted]
  - Marsymars 7y ago
    > 1Password on Mac seems to have a trick where it empties the clipboard after a certain amount of time, I’ve noticed that occasionally when a password I’d copied a little while ago isn’t still in the clipboard when I try to paste it. I haven’t been quite curious enough to look into it. Yet... I think this is pretty standard. KeePass makes it immediately obvious as it has a bar on the bottom of the window that starts a 12-second decrement when you copy a password.
  - saagarjha 7y ago
    https://developer.apple.com/documentation/uikit/uipasteboard/optionskey/1829414-expirationdate https://developer.apple.com/documentation/uikit/uipasteboard...

cortesoft 7y ago

I think just saying "paste and go" is fine, they don't need to know where it is going before I click yes