IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [clipboard]

31 questions
193
votes
7 answers

How can I protect myself from this kind of clipboard abuse?

Clipboard abuse from websites Many websites use JavaScript or CSS to stealthily insert or replace text in the user's clipboard whenever they copy information from the page. As far as I know this is mostly used for advertising purposes, but PoC for…
sam hocevar
  • 1,869
  • 2
  • 13
  • 9
85
votes
3 answers

Can phone apps read my clipboard?

Via Hacker News, I came across a Tweet implying that Facebook's iOS app routinely reads and transmits all content from the user's pasteboard. Leaving aside whether Facebook's app genuinely does this (which is a separate question), is this possible?…
Mark Amery
  • 1,777
  • 2
  • 13
  • 19
50
votes
3 answers

Is a password in the clipboard vulnerable to attacks?

I see situations where you may have to input the same password more than once. You may type it in a text editor and copy it to clipboard, to paste it two or more times. In what scenarios this could be a bad idea?
Strapakowsky
  • 3,039
  • 8
  • 26
  • 31
14
votes
5 answers

Is clipboard secure?

Can a browser get the data on my clipboard? Data could be for example my temporary password? Any browser or operating system that allows this?
LanceBaynes
  • 6,149
  • 11
  • 60
  • 91
12
votes
1 answer

Universal clipboard iOS10 and macOS. How secure?

New iOS10 and macOS Sierra has a feature called universal clipboard. You can copy something (text, image) on one device and paste it on another. How secure is it and does that mean that everything that you'll copy on any device will automatically…
user179996
  • 355
  • 1
  • 2
  • 7
9
votes
2 answers

Best practices when forwarding an email or copy / pasting from confidential information sources?

I get asked this a lot from older people, or for legal matters. They want to forward an email message they've received to another party, while removing any identifying information from the first party - as well as removing some lines from the body…
cloneman
  • 379
  • 2
  • 8
8
votes
2 answers

Is the macOS Universal Clipboard secure?

Since the introduction of Universal Clipboard on Apple's operating systems, I've found myself increasingly relying on it to paste passwords and authentication codes from my MacBook to my iPhone and vice-versa. I use a password manager, and on my…
Gabriele Cirulli
  • 243
  • 3
  • 6
7
votes
4 answers

Is there a clipboard timeout?

The "clipboard" buffer might contain sensitive information (like passwords, or private messages sent to or received from other people) cut/copied previously, that, wenn accidentally pasted into a wrong window, can leak this sensitive…
tmh
  • 1,139
  • 1
  • 9
  • 10
5
votes
2 answers

Possible way to extract sudo password from running system via the clipboard

I use to copy and paste my sudo password from a KeePass file so I guess the plain text user password will be saved in RAM at some point when I use it, for example, to accept an update. Is that right? Would it be theoretically possible for an…
Junior J. Garland
  • 677
  • 5
  • 15
5
votes
3 answers

Keyboard vs clipboard password manager threat models

A password manager (like KeePass) offers you the option to copy and paste your password (the clipboard is cleared after pasting/timeout) or to emulate a keyboard and "type" the password for the user. What are the cases where one method is better…
lanterlog
  • 73
  • 5
4
votes
1 answer

Is copying passwords to iOS clipboard secure?

Since apps on iOS can access the clipboard should I worry about it when copying passwords from the keychain? I do that when AutoFill feature doesn't work so I would not have to manually retype complicated passwords.
Peter
  • 127
  • 7
4
votes
4 answers

What is the threat of having the clipboard enabled on Citrix and other rdp?

It is a question I have had for some time which I have never received a solid answer on. It seems most infosec teams prefer to disable clipboard functionality on Citrix and other RDP setups. What is the real threat here and does the threat…
Brettski
  • 521
  • 3
  • 8
  • 14
3
votes
1 answer

(Why) should the clipboard be cleared when it contains content from a closed program?

Some operating systems resp. desktop managers clear copied content from the clipboard when the "source" program gets closed. Example: copy (Ctrl+c) some text from a webpage in your browser close the browser paste (Ctrl+v) this into a text file →…
unor
  • 1,769
  • 1
  • 19
  • 38
3
votes
2 answers

What protections exist on operating system clipboards?

This is an operating system agnostic question. We are recommended to use password managers which encourage us to copy and paste our passwords. What protections exist if any to say a malicious website in another tab copying clipboard content?
user115400
2
votes
1 answer

Is drag-and-drop safer than using the clipboard when it comes to protecting sensitive data from keyloggers?

I noticed that multiple password-locker applications recommend that you use the drag-and-drop feature to transfer passwords to login forms instead of copying the passwords to the clipboard or having the password locker type the password for you…
hugomg
  • 121
  • 3
1
2 3