News for hackers. Stuff that matters.

A comment on Substack's UI and 1Password temporarily cost me $2k. Parent comment

Re:Substack's UI and 1Password temporarily cost me $2k by treesprite82 on Tuesday March 23, 2021 @01:02AM (#26551310)
I don't think a webpage can read clipboard without the user manually pasting.

If there's some malicious desktop program running on your machine at the same time as the password manager then you're probably screwed regardless of whether the password passes through the clipboard - but maybe there's some subtleties I'm missing here.

[ Parent | on HN ]
Re:Substack's UI and 1Password temporarily cost me $2k by flemhans on Tuesday March 23, 2021 @10:04AM (#26555112)
I've accidentally pasted sensitive passwords enough times that I know the procedure is prone to errors.

If I have to do it, I immediately copy something else right afterwards, to avoid an accidental paste later on.

[ Parent | on HN ]
Re:Substack's UI and 1Password temporarily cost me $2k by treesprite82 on Tuesday March 23, 2021 @11:26AM (#26556125)
10 seconds auto-clear (which is configurable) is short enough to prevent me accidentally pasting onto some other site.

Could be better if it auto-cleared after a paste, but not sure how feasible that would be.

[ Parent | on HN ]