News for hackers. Stuff that matters.

A comment on Android permissions and hypocrisy. Parent comment

Re:Android permissions and hypocrisy by izacus on Monday January 23, 2017 @06:06AM (#13461330)
LastPass either hooks up to the Accessibility framework (scanning for password fields and filling them in directly), provides a keyboard (filling directly) or standard copy/paste.
[ Parent | on HN ]
Re:Android permissions and hypocrisy by drdaeman on Monday January 23, 2017 @08:50AM (#13462122)
AFAIK, LastPass still uses clipboard, even when accessibility APIs are available. Probably because new-style autofills (like pass implementation Password Store uses) are possible since relatively recent API revisions and there are still a lot of 4.x Androids out there.

Maybe I'm wrong, but at the very least, XPrivacy indicates it accesses clipboard shortly after requesting auto-fill - don't have a hook for setting text there.

[ Parent | on HN ]
Re:Android permissions and hypocrisy by ThatGeoGuy on Monday January 23, 2017 @01:00PM (#13464217)
As far as I can tell LastPass also clears the clipboard after you've pasted a password or something from the app. The other day I had to paste my Google password twice and noticed that it was cleared from the clipboard in the meantime.
[ Parent | on HN ]