Bug 376526

Summary:	Clipboard text available for pastingwhen lock screen visible
Product:	[Unmaintained] kscreenlocker	Reporter:	bluescreenavenger
Component:	greeter	Assignee:	Plasma Bugs List <plasma-bugs-null>
Status:	RESOLVED FIXED
Severity:	normal	CC:	bshah, kde, mail, mgraesslin
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
URL:	https://phabricator.kde.org/D4650
Latest Commit:	https://commits.kde.org/kscreenlocker/cae1e82fc94f23f735ae3c189030505a95810cb5	Version Fixed/Implemented In:	5.10
Sentry Crash Report:

Description bluescreenavenger 2017-02-16 00:54:53 UTC

Inspired by https://hexatomium.github.io/2017/02/15/windows10-clipboard-lockscreen/
I decided to see if this works in KDE. While it seems with the greeter, there is no way to see the contents in plain text, the password field does get filled with the contents of the clipboard.

With this I guess, could allow someone to unlock the screen in the unlikely and ill advisable scenario that the user copies their password, then locks the screen

This is under X11, I have not tested Wayland yet.

Comment 1 Martin Flöser 2017-02-17 17:15:53 UTC

Git commit cae1e82fc94f23f735ae3c189030505a95810cb5 by Martin Gräßlin.
Committed on 17/02/2017 at 15:23.
Pushed by graesslin into branch 'master'.

[greeter] Clear clipboard on show

Summary:
As we have a feature to show the password it would be possible for an
unauthorized user to get access to the clipboard.

To prevent this, the clipboard gets cleared when we have the window
shown. This is late enough on Wayland to be able to clear the clipboard.
FIXED-IN: 5.10

Test Plan:
On Wayland, paste is no longer possible. X11 is untested,
there klipper might restore clipboard content.

Reviewers: #plasma

Subscribers: plasma-devel

Tags: #plasma

Differential Revision: https://phabricator.kde.org/D4650

M  +2    -0    greeter/greeterapp.cpp

https://commits.kde.org/kscreenlocker/cae1e82fc94f23f735ae3c189030505a95810cb5

Comment 2 Martin Flöser 2017-02-22 15:47:12 UTC

*** Bug 358684 has been marked as a duplicate of this bug. ***

Comment 3 Christoph Feck 2017-08-21 17:19:42 UTC

*** Bug 383768 has been marked as a duplicate of this bug. ***