Copy/paste is one of the things (next to a lot of other advises) that are mostly listed when people want to be Accreditated for one or more iso certificates.

Problem is that a copy paste often can contain a lot of other 'sh*t' and that makes it dangerous. We always recommended to open a plain ascii editor, paste it there and see if there is no other code there. It is an old and sane advise
Follow

@hans

>"We always recommended to open a plain ascii editor, paste it there and see if there is no other code there. It is an old and sane advise"

The best advise is to not use a desktop terminal at all, only use the gettys started by init.

The clipboard has often been a source of data leaks, going back to beginning of GUIs.

I looked up this specific exploit, and it's called "pastejacking". It was first discovered about six years ago by Dylan Ayrey and apparently recently rediscovered independently by Gabriel Friedlander.

web.archive.org/web/2017010423

In essence, the clipboard is a user-level IPC, and those are always attractive security targets.

GUI = graphical user interface
IPC = interprocess communication
man getty
man init

Sign in to participate in the conversation
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.