3 ms·
Make clipboard behave like a channel[+], like GNOME native apps do, additionally require a standard paste command to paste, then this clipboard attack will be i
by anticensor 6y ago
Make clipboard behave like a channel[+], like GNOME native apps do, additionally require a standard paste command to paste, then this clipboard attack will be impossible to conduct.
[+]:A sample pipe might be a good analogy for this behaviour. You cut or copy the input, send through the sample pipe, and the receiving end unpacks, receiving itself makes the sample disappear for further use. Multiple samples could be sent through the pipe, though the pipe should behave in a LIFO, no sample adding allowed after removal starts, manner if this is desired.
- rzzzt 6y agoAlternatively, encrypt the contents of the clipboard at rest.
- filleduchaos 6y agoGNOME is based on X11, which _very_ much grants programmatic access to the clipboard to pretty much any application that asks. Seriously, has anyone complaining about this actually paid any attention to how clipboards work on their OSes before this?
- anticensor 6y ago> to how clipboards work on their OSes before this? GNOME has a Wayland implementation too, and what I said only applies to GNOME native apps.
- filleduchaos 6y agoGtkClipboard, like many, many other clipboard implementations, provides programmatic access to applications[0]. I am thus very curious indeed about how a "GNOME native" app differs in this context. 0. https://developer.gnome.org/gtk3/stable/gtk3-Clipboards.html https://developer.gnome.org/gtk3/stable/gtk3-Clipboards.html