4 ms·
I argue that the clipboard shouldn’t be given any extra levels of trust because it’s current level of trust, very low, is the correct amount.
by willis936 6y ago
I argue that the clipboard shouldn’t be given any extra levels of trust because it’s current level of trust, very low, is the correct amount.
- filleduchaos 6y agoPrecisely! It's the rough equivalent of a tempfile in your home directory, I don't know why even developers have come to view it like it's some super secure and private kernel component.
- behringer 6y agoThat's all well and good, unless you're an attorney, author, document writer, research scientist, or literally anybody who types a lot... At jobs I've literally copy PHI all over the place for data processing. Copy and paste is vital and often top secret.
- willis936 6y agoIt’s a bad shaped tool for that problem. It’s a shared resource. There is a gaping hazard where any other piece of software can change the data you want to read before you can read it. Use a database.
- behringer 6y agoIf it were that simple there wouldn't be employees.
- willis936 6y agoI don’t mean look up a database. I mean make a database. Write a program that skims the document, parses what’s needed, and places it into a locally running database. Then, in another program, read the values you need. The clipboard is simply the wrong tool here. A database is bog standard.
- behringer 6y agoHow do you write documents?
- smichel17 6y agoWhat other tool provides same order of magnitude convenience for moving data verbatim between contexts? "Share" on mobile covers some use cases, but even then, you can't open a discrete password manager app and share your password directly to the password field in your browser.