[clug] unusual password retention in browser

[Hal Ashburner]

rejected by list.

On 14 August 2015 at 15:20, Hal Ashburner <hal at ashburner.info> wrote:
> Clipboards under linux (or any other X using machine are a nightmare).
> "Historically, X clinets have not handled cut-and-paste in a
> consistent way, ..."
>
> http://standards.freedesktop.org/clipboards-spec/clipboards-latest.txt
>
> Inconsistency between your browser and whatever terminal your editor
> is running in most likely, for mine.
>
> On 14 August 2015 at 14:59, Eyal Lebedinsky <eyal at eyal.emu.id.au> wrote:
>> I recently noticed a strange thing, where it seems that my password is
>> retailed after being used.
>>
>> Here is the simple scenario
>> - log into my bank with details I have in a file (file-1).
>> - copy+paste access code
>> - copy+paste password
>> - click login
>>   I am in
>> - I copy+paste some text off the screen into *another* shell running vi
>> (file-2). Works fine
>> - I now make a service selection asking to get a report as pdf.
>> - I get the firefox dialogue asking to "open" or "save". I select "save"
>> - I get the save dialogue (need to select location and file name)
>> - In the file-2 vi I enter insert mode and click the middle button. I get
>> two lines:
>> xxxxxxxxxxxxxxxx        (my password!)
>> abc_14Aug2015_023456    (suggested file name)
>>
>> - WTF???
>>
>> Who is holding my password? I can only think of firefox, but maybe the bank
>> js?
>>
>> How was it inserted into the copy buffer *after* I used the buffer to copy
>> other stuff? Surely it
>> was supposed to be completely forgotten?
>>
>> TIA
>>
>> --
>> Eyal Lebedinsky (eyal at eyal.emu.id.au)
>>
>> --
>> linux mailing list
>> linux at lists.samba.org
>> https://lists.samba.org/mailman/listinfo/linux