3 ms·
I think use of the copy buffer is the weakness of pass. Can't it be read by any process?
by mongol 5y ago
I think use of the copy buffer is the weakness of pass. Can't it be read by any process?
- INTPenis 5y agoThis is a very good point about infosec that a lot of password manager users overlook. Me included. In wayland you can pipe the password into wl-copy -o so it will only be pasted once then disappear. In Xorg you'd need a callback after running pass that runs xclip -i /dev/null some time after the password is copied. There is no good solution to this in Linux that does not involve discipline.
- tyingq 5y agoThe clipboard? How well it's protected varies by distro, X11 vs Wayland, etc.