Copy Fail – CVE-2026-31431

Re:Copy Fail – CVE-2026-31431 by dwedge on Thursday April 30, 2026 @05:05AM (#47959973)

Only for your user, and it means a keylogger on the system if it gets rooted can't pull your password to try on other machines. Personally I always either login as root or use passwordless sudo.

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by XorNot on Thursday April 30, 2026 @05:45AM (#47960193)

Yubikeys are also surprisingly annoying when setup for the as well. A working developer just needs sudo a lot.

Realistically a "sudo button" would be handy, on the keyboard, with a display to show a confirmation pin for the request (probably also needs a deny button so you can try and identify weird ones).

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by parliament32 on Thursday April 30, 2026 @10:41AM (#47963290)

Sounds like a good use case for that new Copilot button you see on newer keyboards.

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by IshKebab on Thursday April 30, 2026 @11:06AM (#47963647)

You don't even need a button. Just a secure dialog like Windows has.

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by Pay08 on Thursday April 30, 2026 @11:16AM (#47963816)

I mean, that's what you have pinentry for.

[ Parent | on HN ]