4 ms·

Somewhat related, I was quite surprised when I discovered that my Samsung phone was sharing ALL my clipboard with all my other Samsung devices, including passwo

Somewhat related, I was quite surprised when I discovered that my Samsung phone was sharing ALL my clipboard with all my other Samsung devices, including passwords copied into the clipboard, and even preserving the history. I can't remember if the sharing was enabled by default or I opted in by accident. I assume it also goes through their servers to reach my other devices. I could disable the sharing, but still can't turn off the clipboard history, even switching to a different keyboard, the Samsung keyboard still captures the clipboard and saves the history, when I switch the keyboard to Samsung everything is there... I guess my next phone won't be Samsung.

nullify88 1y ago
I usually suggest not to create or login with a Samsung Account on Samsung devices. It's just another opportunity for a company to get at your data.
dannyw 1y ago
Yes, and we know at least Samsung TVs sell your details and what you watch to marketers and everyone. Samsung’s privacy policy is the same for phones and TVs.
xpressvideoz 1y ago
[flagged]
- paffdragon 1y ago
  > You're just an impatient paranoid, easily jumping to conclusions. You should be ashamed for spreading false information. Thank you for your kind words, please look at the HN comment guidelines when you have a chance. Your point would have been an excellent correction if shared thoughtfully, but it's all negated by the name calling and personal attacks.
  - olejorgenb 1y ago
    IIRC, the GP claimed clipboard sharing between Samsung devices only happens over the local network
    - paffdragon 1y ago
      Yes, and would have been great to discuss that in a civil way. Samsung says you need to have the devices on the same Samsung account, same WiFi with Bluetooth enabled in https://www.samsung.com/us/support/answer/ANS10003445/ https://www.samsung.com/us/support/answer/ANS10003445/. But I couldn't find more details on how the actual communication happens and if anything leaves the local network. The Samsung article does not go into details how this works, it does not even say explicitly that it uses the local network only. I tried to search for it, but Googling failed me on this. But I was able to disable that sharing feature, so that isn't my main complaint, it's their clipboard data collection - [1], [2], [3] [1]: https://cybersecuritynews.com/samsung-one-ui-security-flaw/ https://cybersecuritynews.com/samsung-one-ui-security-flaw/ [2]: https://www.tomsguide.com/computing/online-security/samsung-phone-security-flaw-leaves-passwords-exposed-protect-yourself-now https://www.tomsguide.com/computing/online-security/samsung-... [3]: https://windowsforum.com/threads/samsung-clipboard-security-flaw-risks-impacts-and-how-to-protect-your-data.363794/ https://windowsforum.com/threads/samsung-clipboard-security-...
yonatan8070 1y ago
I noticed this happening through KDE connect, where passwords copied on Linux show up in Android's clipboard history, is there a way to block passwords from being transported around like that without completely disabling clipboard sharing altogether?
- fhcbix 1y ago
  KDE connect lets you disable/configure individual plugins, just disable the "Clipboard sync". I don't think it can by itself figure out that you're copying a password, at least across UI toolkits. FWIW most toolkits and browsers don't actually copy from a password input anyway.
- pabs3 1y ago
  You might want to disable KDE's clipboard history too btw, or at least find a solution that doesn't involve copying passwords. Either use the selection instead of the clipboard, or use password filling through non-clipboard channels.

nullify88 1y ago

I usually suggest not to create or login with a Samsung Account on Samsung devices. It's just another opportunity for a company to get at your data.

dannyw 1y ago

Yes, and we know at least Samsung TVs sell your details and what you watch to marketers and everyone. Samsung’s privacy policy is the same for phones and TVs.

xpressvideoz 1y ago

[flagged]

paffdragon 1y ago
> You're just an impatient paranoid, easily jumping to conclusions. You should be ashamed for spreading false information. Thank you for your kind words, please look at the HN comment guidelines when you have a chance. Your point would have been an excellent correction if shared thoughtfully, but it's all negated by the name calling and personal attacks.
- olejorgenb 1y ago
  IIRC, the GP claimed clipboard sharing between Samsung devices only happens over the local network
  - paffdragon 1y ago
    Yes, and would have been great to discuss that in a civil way. Samsung says you need to have the devices on the same Samsung account, same WiFi with Bluetooth enabled in https://www.samsung.com/us/support/answer/ANS10003445/ https://www.samsung.com/us/support/answer/ANS10003445/. But I couldn't find more details on how the actual communication happens and if anything leaves the local network. The Samsung article does not go into details how this works, it does not even say explicitly that it uses the local network only. I tried to search for it, but Googling failed me on this. But I was able to disable that sharing feature, so that isn't my main complaint, it's their clipboard data collection - [1], [2], [3] [1]: https://cybersecuritynews.com/samsung-one-ui-security-flaw/ https://cybersecuritynews.com/samsung-one-ui-security-flaw/ [2]: https://www.tomsguide.com/computing/online-security/samsung-phone-security-flaw-leaves-passwords-exposed-protect-yourself-now https://www.tomsguide.com/computing/online-security/samsung-... [3]: https://windowsforum.com/threads/samsung-clipboard-security-flaw-risks-impacts-and-how-to-protect-your-data.363794/ https://windowsforum.com/threads/samsung-clipboard-security-...

yonatan8070 1y ago

I noticed this happening through KDE connect, where passwords copied on Linux show up in Android's clipboard history, is there a way to block passwords from being transported around like that without completely disabling clipboard sharing altogether?

fhcbix 1y ago
KDE connect lets you disable/configure individual plugins, just disable the "Clipboard sync". I don't think it can by itself figure out that you're copying a password, at least across UI toolkits. FWIW most toolkits and browsers don't actually copy from a password input anyway.
pabs3 1y ago
You might want to disable KDE's clipboard history too btw, or at least find a solution that doesn't involve copying passwords. Either use the selection instead of the clipboard, or use password filling through non-clipboard channels.