4 ms·
As far as I can assess this, I believe it is safer to do this instead of copying to the clipboard. The clipboard might be read by a malicious process while auto
by eloeffler 5y ago
As far as I can assess this, I believe it is safer to do this instead of copying to the clipboard. The clipboard might be read by a malicious process while autotype with passmeni will only pipe the password to xdotool and that will generate keystrokes. it's only important to have the correct field selected before autotyping or you might end up googling your password :)
- eurasiantiger 5y agoA malicious process could also do many other things. I think the most likely vector for autotyping attacks is simple phishing / clickjacking.
- Normal_gaussian 5y agoFor general readers: Its pretty safe when done via a browser plugin to a website because the plugin both verifies the website (anti-phishing) and uses auto-fill rather than type (it directly injects into the target field rather than typing, so clickjacking isn't a risk). Its rare that I use passwords outside of the browser now, but windows and mac allow system credentials to mitigate the same risks for desktop apps (the app must support it).
- eloeffler 5y agoTrue, but wouldn't that apply to manual password entry as much?