* William Ballard ([EMAIL PROTECTED]) wrote:
> On Mon, Feb 13, 2006 at 05:52:29PM -0500, Eric Dorland wrote:
> > tags 352480 wontfix
> > thanks
> > 
> > * William Ballard ([EMAIL PROTECTED]) wrote:
> > > Package: firefox
> > > Version: 1.5.dfsg-4
> > > Severity: normal
> > > 
> > > Firefox has a mode where it will sometimes do a google search on 
> > > whatever the contents of your clipboard is.  I don't know the exact 
> > > mouse sequence (I think it's middle button), but I'm sure you know what 
> > > I'm talking about.
> > > 
> > > More than once I've had some sensitive data (including passwords) in the 
> > > clipboard and had the my secret password posted to the internet!
> > > 
> > > Since this feature is insecure could it be disabled by default?
> > 
> > This is not a security risk, you're still the one who pasted a
> > password into Firefox. There's only so much a program can do to save
> > the user from themselves. Won't fix.
> 
> It's a misfeature.  It's too easy to lean on the mouse at the wrong
> time and Firefox rockets your clipboard contents off to the internet.

It's an excellent feature, one I use multiple times a day.
 
> It's not as easy to accidentally lean on the keyboard and press Ctrl+V,
> but it's super-easy to accidentally click the middle button.
> 
> This is more of a misfeature in X: I could have a bunch of rm commands
> in the clipboard and accidentally execute them in xterm;

I generally have enough dexterity and motor control to not find myself
clicking the middle mouse button accidently several times a day. 

I also tend to be of the school of "don't cripple your computer just
to make it idiot-proof".

> but in Firefox it's particularly nasty because it just jets off on you.
> 
> -50 cool points.

+50 lamer points to you.

-- 
Eric Dorland <[EMAIL PROTECTED]>
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
------END GEEK CODE BLOCK------

Attachment: signature.asc
Description: Digital signature

Reply via email to