News for hackers. Stuff that matters.

A comment on Should you be concerned about LastPass uploading your passwords to its server?. Parent comment

Re:Should you be concerned about LastPass uploading your pas... by 1024core on Friday April 05, 2019 @11:57AM (#19583775)
> copy it to the clipboard and fill the form myself.

I'm not that familiar with mobile dev, but could a rogue app just sit in the background, making a copy of whatever's in the clipboard?

[ Parent | on HN ]
Re:Should you be concerned about LastPass uploading your pas... by yani on Friday April 05, 2019 @12:37PM (#19584282)
If you have such an application installed... the system has already been compromised.
[ Parent | on HN ]
Re:Should you be concerned about LastPass uploading your pas... by shawnz on Friday April 05, 2019 @12:08PM (#19583892)
Yes, Keepass for example avoids this by pasting some of the characters with the clipboard and some of the characters by simulating keypresses. See: https://keepass.info/%0D/help/v2/autotype_obfuscation.html

Lastpass mitigates the issue somewhat by clearing the clipboard after a certain amount of time.

[ Parent | on HN ]