News for hackers. Stuff that matters.

A comment on Autofill in password managers can allow login credentials to be stolen. Parent comment

Re:Autofill in password managers can allow login credentials... by emodendroket on Monday July 26, 2021 @09:50PM (#27967706)
Fair point, but I don't think you can _read_ the contents of the system clipboard, can you? I thought you could set it but had to wait for a paste event to read it.
[ Parent | on HN ]
Re:Autofill in password managers can allow login credentials... by itsananderson on Monday July 26, 2021 @10:21PM (#27967914)
It requires a permission request, but yes there's a browser API to read the clipboard contents https://developer.mozilla.org/en-US/docs/Web/API/Clipboard/r...
[ Parent | on HN ]
Re:Autofill in password managers can allow login credentials... by partido3619463 on Monday July 26, 2021 @10:06PM (#27967809)
On iOS and Mac the clipboard is readable to all apps without interaction. (Eg slack allows login on Mac desktop by copy/pasting text from the browser. Chrome on iOS will auto paste from clipboard to show a target url)
[ Parent | on HN ]