Re:Substack's UI and 1Password temporarily cost me $2k
by kgwxd on Monday March 22, 2021 @09:58PM
(#26550104)
Mine clears the clipboard after 10 seconds.
[ Parent
| on HN ]
Re:Substack's UI and 1Password temporarily cost me $2k
by ProtoAES256 on Monday March 22, 2021 @10:52PM
(#26550469)
You do realize that in 10 seconds your computer can achieve a lot of stuffs right?
Re:Substack's UI and 1Password temporarily cost me $2k
by treesprite82 on Tuesday March 23, 2021 @01:02AM
(#26551310)
I don't think a webpage can read clipboard without the user manually pasting.
If there's some malicious desktop program running on your machine at the same time as the password manager then you're probably screwed regardless of whether the password passes through the clipboard - but maybe there's some subtleties I'm missing here.
Re:Substack's UI and 1Password temporarily cost me $2k
by flemhans on Tuesday March 23, 2021 @10:04AM
(#26555112)
I've accidentally pasted sensitive passwords enough times that I know the procedure is prone to errors.
If I have to do it, I immediately copy something else right afterwards, to avoid an accidental paste later on.
Re:Substack's UI and 1Password temporarily cost me $2k
by treesprite82 on Tuesday March 23, 2021 @11:26AM
(#26556125)
10 seconds auto-clear (which is configurable) is short enough to prevent me accidentally pasting onto some other site.
Could be better if it auto-cleared after a paste, but not sure how feasible that would be.
Re:Substack's UI and 1Password temporarily cost me $2k
by fsh on Tuesday March 23, 2021 @01:42AM
(#26551499)
For example it could just read all the passwords from the password manager's UI.
Re:Substack's UI and 1Password temporarily cost me $2k
by pyhtel on Tuesday March 23, 2021 @05:20AM
(#26552768)
Between Keepass, 1passwword, and lastpass I've never seen a password manager that just shows the password without the user explicitly choosing to reveal it
Re:Substack's UI and 1Password temporarily cost me $2k
by EricE on Tuesday March 23, 2021 @02:29PM
(#26558430)
1password has the option to do so and I do it on my home desktop computer. Obviously on mobile devices it would be a bad idea and on those I leave that option in it's default, disabled state :)
Re:Substack's UI and 1Password temporarily cost me $2k
by abdullahkhalids on Tuesday March 23, 2021 @02:41AM
(#26551798)
The purpose of clearing clipboard is so you don't accidentally paste it into a chat window or something. Not to protect against malicious programs.