Re:PayPal 2FA Bypass
by pluma on Monday October 24, 2016 @05:49AM
(#12777620)
Sure, except then it would intercept the copy, not the paste. And it basically trades clipboard vulnerabilities for keylogging vulnerabilities.
A more realistic exploit is a Flash banner on another tab intercepting the password in the clipboard. This is why offline password managers automatically expire the clipboard though.
The danger of discouraging complex or long passwords is far greater than either of these two attacks, both of which rely on the user's system already being compromised.
A more realistic exploit is a Flash banner on another tab intercepting the password in the clipboard. This is why offline password managers automatically expire the clipboard though.
The danger of discouraging complex or long passwords is far greater than either of these two attacks, both of which rely on the user's system already being compromised.