https://bugs.kde.org/show_bug.cgi?id=494952

            Bug ID: 494952
           Summary: Security issues with klipper and saving bugs
    Classification: Plasma
           Product: plasmashell
           Version: 6.2.0
          Platform: Fedora RPMs
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: Clipboard
          Assignee: plasma-b...@kde.org
          Reporter: scooter_icky...@simplelogin.com
  Target Milestone: 1.0

SUMMARY
Klipper doesn't use encryption, so all saved clipboard history is available for
everyone to view. 
The only way to get klipper to stop doing this is apparently to disable saving
history across sessions, however, contrary to the logical expectation, history
is still written to the file. 

STEPS TO REPRODUCE
1. Check the file contents at ~/.local/share/klipper/history2.lst.
2. Disable the mentioned option. 
3. Check the file again. (It should be wiped)
4. Open the panel tray.

OBSERVED RESULT
The history file is re-populated when you open the panel tray. 

EXPECTED RESULT
There should be no writing to the file whatsoever once you disable the option. 

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
(available in the Info Center app, or by running `kinfo` in a terminal window)
Linux/KDE Plasma:  6.10.12-200.fc40.x86_64/6.2.0
KDE Plasma Version: 6.2.0
KDE Frameworks Version: 6.7.0
Qt Version: 6.7.2

ADDITIONAL INFORMATION
Not sure if there should be a new "bug" for this, but it would be great to have
an option and a keyboard shortcut to toggle history.  Also, there should
absolutely be an option for completely disabling klipper.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to