3 ms·
It doesn't (and can't) really address the most important issue that there's no secure clipboard and on top of that some desktop environments come with "clipboar
by mike_hock 4y ago
It doesn't (and can't) really address the most important issue that there's no secure clipboard and on top of that some desktop environments come with "clipboard history" malware by default that sniffs your clipboard and logs its content to an unencrypted file.
- gspr 4y agoThe threat model assumes at least some trust in the system you're running pass on.
- weberer 4y agoOh boy, wait until you find out how X11 handles keyboard input.
- tialaramex 4y agoYou needn't use the clipboard feature, and in fact I think I can count how often I've used it on my fingers after several years. My browser has a pass-compatible agent that requests passwords for web sites when I tell it to do that, if I just want to know an actual human password that's in pass, I run it on the command line and look at my terminal. In my home the visual displays are not recorded ("for training and quality purposes").
- 0daystock 4y agoSomeone who can sniff your clipboard doesn't need your passwords, they can just lift your cookies or files directly.