Re:Android permissions and hypocrisy
by emodendroket on Monday January 23, 2017 @07:30AM
(#13461730)
Could you explain why you say that about the PC? As far as I know, the browser isn't going to let someone snatch your clipboard info. An application running locally, sure, but an application running locally could also be doing keylogging, I'd think.
[ Parent
| on HN ]
The same argument is true on smartphones. Only an application you've installed is able to snatch your clipboard info.
Treat your phone like you've always treated your desktop - only install trusted applications and use tools like XPrivacy to analyze sketchy applications and block "features" for the ones you absolutely need to use.
It is probably better now, but you used to be able to copy clipboard content from javascript or flash.
Keepass for windows and linux use autotyping or clears the buffer after a few seconds if you copy.
Re:Android permissions and hypocrisy
by emodendroket on Monday January 23, 2017 @08:57AM
(#13462152)
Oh, I see. Yeah, Flash is a different story, I guess, but for JavaScript you can't get at the clipboard unless someone pastes in all the browsers I'm aware of.
There's a library for accessing the clipboard within JS[1]. As far as I can tell, the HTML5 APIs for it are designed to stop this from being used to steal your clipboard but I somewhat doubt its effectiveness.
Re:Android permissions and hypocrisy
by emodendroket on Monday January 23, 2017 @11:39AM
(#13463430)
That seems to let you write to the clipboard, not read it.