3 ms·
Seems a plausible concern that malware on the PC can access the clipboard, so they discourage copying their password into clipboard. But intercepting keystrokes
by mrtnmcc 6y ago
Seems a plausible concern that malware on the PC can access the clipboard, so they discourage copying their password into clipboard. But intercepting keystrokes to another program (at least in Windows) doesn't require any special permissions either.
Would the concern more be background web tabs (cross-site) accessing the global clipboard? Vaguely recall that was possible a long time ago but likely locked down now.
- geofft 6y agoAs the article points out, for malicious sites that was true on IE 6 but no longer, and for malicious local software you have bigger problems.
- mrtnmcc 6y agoThanks, didn't notice the popouts in the page. That's right.. IE6 was the menace.
- ChrisSD 6y agoIf there is malware on the pc then the browser itself must be assumed compromised. It's futile to half plug one small hole while a million others exist. And by attempting to plug that hole you've added an inconvenience that may encourage users to use a less secure password.