https://bugs.kde.org/show_bug.cgi?id=469877
Bug ID: 469877
Summary: No way to cancel / revoke a pairing request once
started
Classification: Applications
Product: kdeconnect
Version: 23.04.1
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: common
Assignee: albertv...@gmail.com
Reporter: adam.m.fontenot+...@gmail.com
CC: andrew.g.r.hol...@gmail.com
Target Milestone: ---
SUMMARY
If you accidentally click on the wrong device when requesting pairing, there is
no way to cancel. This means you must wait for either (a) the request to
timeout, or (b) the (potentially hostile) other device to accept your pairing
request, and then revoke pairing as quickly as possible, hopefully before it is
able to do any damage.
A secondary component of this issue is that there's no way for the device that
requests pairing to verify the key of the device that receives the request
before pairing is activated. If both sides had to click okay, with a chance to
view the other's key, before pairing became active, that would ameliorate this
issue. As things stand "request pair" amounts to "please give away all my
device permissions to whatever is on the other end of this device label".
This issue applies to both desktop (at least on Linux) and the Android
applications.
SOFTWARE/OS VERSIONS
Operating System: Arch Linux
KDE Plasma Version: 5.27.5
KDE Frameworks Version: 5.106.0
Qt Version: 5.15.9
Kernel Version: 6.3.2-arch1-1 (64-bit)
Graphics Platform: X11
Android version 1.24.5 (Google Play store)
--
You are receiving this mail because:
You are watching all bug changes.
