5 ms·

Sure, I get it. LinkedIn's email plugin thing was a security nightmare. But in this case, the code is right there! Take a step back and look at the entire fore

Sure, I get it. LinkedIn's email plugin thing was a security nightmare. But in this case, the code is right there! Take a step back and look at the entire forest: The outrage is over an app accessing data specifically designed to be shared across applications. That's what Copy fundamentally means- make this thing globally available to all my programs. You can poll pbpaste/xsel in your terminal and generate a log of the clipboard buffer without any privileges. Does this mean an untrustworthy app could, in theory, snoop your plaintext password copied from a password manager? Sure, but that's a separate discussion. Ask yourself, does it make sense to implement clipboard snooping in a way that polls the pasteboard on every keystroke while an input form remains in focus? No, that's weird, there's obvious bug stench. LinkedIn may be nefarious, but defaulting to instant outrage and lack of critical thinking is the real concern here.

pacoverdi 6y ago
> That's what Copy fundamentally means- make this thing globally available to all my programs Wouldn't that be: Copy means- "make this thing go into MY clipboard". Paste means- "make my clipboard available to THIS application".
- efreak 6y ago
  Copy and paste are application-level interfaces; the operating system holds the data, but has always given it up on demand. I've actually seen some applications that use the clipboard as an IPC mechanism (most recently, a Python application, I don't recall what for, was wiping URLs from my clipboard to see if it was already running)
  - pacoverdi 6y ago
    Historically, yes. But in a world of mobile OS with permissions everywhere, it would make sense to deny full read access by default. I may be wrong but I thought that even websites cannot access clipboard content except in write mode. Even, I remember that long ago, a Flash script was commonly used to be able to copy stuff into it.
rdslw 6y ago
No it's not, and your thinking is completly bad from privacy standpoint. PASTE operation is where I give consent, to MY clipboard content. Not COPY. Thinking that COPY gives consent is like all the ideas that i-take-user-date-unlsess-user-opts-out . It is not fine. You shall NOT paste without my permission.
- fingerlocks 6y ago
  I am describing how things are; you are describing how you want them to be.

pacoverdi 6y ago

> That's what Copy fundamentally means- make this thing globally available to all my programs Wouldn't that be: Copy means- "make this thing go into MY clipboard". Paste means- "make my clipboard available to THIS application".

efreak 6y ago
Copy and paste are application-level interfaces; the operating system holds the data, but has always given it up on demand. I've actually seen some applications that use the clipboard as an IPC mechanism (most recently, a Python application, I don't recall what for, was wiping URLs from my clipboard to see if it was already running)
- pacoverdi 6y ago
  Historically, yes. But in a world of mobile OS with permissions everywhere, it would make sense to deny full read access by default. I may be wrong but I thought that even websites cannot access clipboard content except in write mode. Even, I remember that long ago, a Flash script was commonly used to be able to copy stuff into it.

rdslw 6y ago

No it's not, and your thinking is completly bad from privacy standpoint. PASTE operation is where I give consent, to MY clipboard content. Not COPY. Thinking that COPY gives consent is like all the ideas that i-take-user-date-unlsess-user-opts-out . It is not fine. You shall NOT paste without my permission.

fingerlocks 6y ago
I am describing how things are; you are describing how you want them to be.