[clug] unusual password retention in browser

Michael Ellerman michael at ellerman.id.au
Mon Aug 17 06:23:11 UTC 2015


On Fri, 2015-08-14 at 14:59 +1000, Eyal Lebedinsky wrote:
> I recently noticed a strange thing, where it seems that my password is retailed after being used.
> 
> Here is the simple scenario
> - log into my bank with details I have in a file (file-1).
> - copy+paste access code
> - copy+paste password

At this point you could run:

$ xclip -o

And you should see your password, then:

$ echo | xclip
$ xclip -o

And it should say no string available.

Does that help?

> - click login
>    I am in


While I'm here I recommend:

http://www.passwordstore.org/


Basically a "password manager" that just stores your passwords in gpg'ed plain
text files.

It also has the feature of clearing the clipboard after a configurable timeout.

cheers






More information about the linux mailing list