Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-16 Thread William Ballard
On Thu, Feb 16, 2006 at 12:50:01AM -0500, Eric Dorland wrote:
 I've never seen a mouse that has worked like this. By definition a
 scrollwheel is a wheel, you roll it forward to scroll up and roll it
 back to scroll down. All the ones I've seen also be pressed down to
 initiate a 3rd button click. Does your mouse not have these abilities? 

In FireFox you push and hold the scroll wheel and move the mouse up and 
down to also scroll.

Scroll wheel up and down - scroll
Push scroll wheel, don't move mouse, release scroll wheel - no action
Push scroll wheel, move mouse up or down w/o release - scroll
Double-click scroll wheel twice - paste

It's this last thing I'm doing accidentally sometimes and pasting my 
clipboard to google with :-)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-16 Thread Eric Dorland
* William Ballard ([EMAIL PROTECTED]) wrote:
 On Thu, Feb 16, 2006 at 12:50:01AM -0500, Eric Dorland wrote:
  I've never seen a mouse that has worked like this. By definition a
  scrollwheel is a wheel, you roll it forward to scroll up and roll it
  back to scroll down. All the ones I've seen also be pressed down to
  initiate a 3rd button click. Does your mouse not have these abilities? 
 
 In FireFox you push and hold the scroll wheel and move the mouse up and 
 down to also scroll.

Only if you have autoscrolling on, which is off by default, so you
turned it on. You can disable it in the preferences menu. 
 
 Scroll wheel up and down - scroll
 Push scroll wheel, don't move mouse, release scroll wheel - no action
 Push scroll wheel, move mouse up or down w/o release - scroll
 Double-click scroll wheel twice - paste

With autoscrolling turned on, I see these behaviors. 

 It's this last thing I'm doing accidentally sometimes and pasting my 
 clipboard to google with :-)
 

-- 
Eric Dorland [EMAIL PROTECTED]
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread William Ballard
Patrick:

The problem is:

1) it treats things that are not URLs as if they were URLs.
2) it's too easily confused by the middle mouse button which
acts as a scroll button and as a paste button.

It actually doesn't do it all the time:

Here's what bugs me about it:

I have some junk on my clipboard.
I press the scroll wheel button down and then release it.

99 times out of a hundred, it begins to scroll, and then
stops.

Every so often it treats the middle mouse button as a true
middle mouse button and does the unix paste.

I haven't figured out the exact sequence of steps which
makes press scroll wheel act like scroll vs. act like
middle button.  It always acts like middle button
in a text field.  On HTML content, it mostly acts like
a scroll button but sometimes acts like a paste button.

It's wack, and a poorly designed user interface.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread William Ballard
On Wed, Feb 15, 2006 at 06:37:49PM -0500, William Ballard wrote:
 Every so often it treats the middle mouse button as a true
 middle mouse button and does the unix paste.

I see what makes it do it: if I press the scroll mouse button
twice quickly it skips the scroll and does the paste.

BUT only if I've highlighed some text in some other random
program -- not if I've highlighted some text in mozilla.

It's highly inconsitent; the X clipboard and Firefox's
helpful ability to post arbitrary information to Google
combine to foil me.

Call me a Luser, but the mouse shouldn't post my entire
clipboard to google, especially when the only indication
I want this information on my clipboard is I highlighted
some text in some other program that Firefox may or may
not recognize.

Too modal.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread Eric Dorland
severity 352480 wishlist
thanks

* William Ballard ([EMAIL PROTECTED]) wrote:
 On Wed, Feb 15, 2006 at 06:37:49PM -0500, William Ballard wrote:
  Every so often it treats the middle mouse button as a true
  middle mouse button and does the unix paste.
 
 I see what makes it do it: if I press the scroll mouse button
 twice quickly it skips the scroll and does the paste.

My suggestion to you is to get a real mouse. I've never seen one like
the kind you describe and it sounds pretty crappy. 

 BUT only if I've highlighed some text in some other random
 program -- not if I've highlighted some text in mozilla.

That's a little bizarre, I don't see that behavior here.
 
 It's highly inconsitent; the X clipboard and Firefox's
 helpful ability to post arbitrary information to Google
 combine to foil me.
 
 Call me a Luser, but the mouse shouldn't post my entire
 clipboard to google, especially when the only indication
 I want this information on my clipboard is I highlighted
 some text in some other program that Firefox may or may
 not recognize.
 
 Too modal.


-- 
Eric Dorland [EMAIL PROTECTED]
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread William Ballard
On Wed, Feb 15, 2006 at 09:48:41PM -0500, Eric Dorland wrote:
 severity 352480 wishlist
 thanks
 
 * William Ballard ([EMAIL PROTECTED]) wrote:
  On Wed, Feb 15, 2006 at 06:37:49PM -0500, William Ballard wrote:
   Every so often it treats the middle mouse button as a true
   middle mouse button and does the unix paste.
  
  I see what makes it do it: if I press the scroll mouse button
  twice quickly it skips the scroll and does the paste.
 
 My suggestion to you is to get a real mouse. I've never seen one like
 the kind you describe and it sounds pretty crappy. 

It does it it with all mice with scrollwheels - Microsoft and Logitech 
MX510.  I think the problem is I sometimes accidentally double-click the 
middle button when I mean to click, hold, scroll.

If this is because I'm a spas, then so be it.  Feature sucks for me.
Me = disable.

Firefox isn't the root of the problem; I just don't like the X 
clipboard.  Same thing happens when I highlight some text in an xterm 
and then forget and 100 minutes later paste in 19,000 commands in 
another via a middle click.

Firefox is just particularly egregious because it submits EVERYTHING to 
the internet.

Why in the world would Firefox do an I Feel Lucky search on an 8,000 
word url?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread Justin Pryzby
 Firefox isn't the root of the problem; I just don't like the X 
 clipboard.  Same thing happens when I highlight some text in an xterm 
 and then forget and 100 minutes later paste in 19,000 commands in 
 another via a middle click.
When I copy large amounts of text, or passwords (!), (and I try not
to), I copy something short after pasting it.

 Firefox is just particularly egregious because it submits EVERYTHING to 
 the internet.
 
 Why in the world would Firefox do an I Feel Lucky search on an 8,000 
 word url?
I'd recommend to not use thunderbird then :)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread Eric Dorland
* William Ballard ([EMAIL PROTECTED]) wrote:
 On Wed, Feb 15, 2006 at 09:48:41PM -0500, Eric Dorland wrote:
  severity 352480 wishlist
  thanks
  
  * William Ballard ([EMAIL PROTECTED]) wrote:
   On Wed, Feb 15, 2006 at 06:37:49PM -0500, William Ballard wrote:
Every so often it treats the middle mouse button as a true
middle mouse button and does the unix paste.
   
   I see what makes it do it: if I press the scroll mouse button
   twice quickly it skips the scroll and does the paste.
  
  My suggestion to you is to get a real mouse. I've never seen one like
  the kind you describe and it sounds pretty crappy. 
 
 It does it it with all mice with scrollwheels - Microsoft and Logitech 
 MX510.  I think the problem is I sometimes accidentally double-click the 
 middle button when I mean to click, hold, scroll.

I've never seen a mouse that has worked like this. By definition a
scrollwheel is a wheel, you roll it forward to scroll up and roll it
back to scroll down. All the ones I've seen also be pressed down to
initiate a 3rd button click. Does your mouse not have these abilities? 
 
 If this is because I'm a spas, then so be it.  Feature sucks for me.
 Me = disable.
 
 Firefox isn't the root of the problem; I just don't like the X 
 clipboard.  Same thing happens when I highlight some text in an xterm 
 and then forget and 100 minutes later paste in 19,000 commands in 
 another via a middle click.
 
 Firefox is just particularly egregious because it submits EVERYTHING to 
 the internet.
 
 Why in the world would Firefox do an I Feel Lucky search on an 8,000 
 word url?
 

-- 
Eric Dorland [EMAIL PROTECTED]
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-15 Thread Mike Hommey
On Wed, Feb 15, 2006 at 10:13:33PM -0500, William Ballard [EMAIL PROTECTED] 
wrote:
 On Wed, Feb 15, 2006 at 09:48:41PM -0500, Eric Dorland wrote:
  severity 352480 wishlist
  thanks
  
  * William Ballard ([EMAIL PROTECTED]) wrote:
   On Wed, Feb 15, 2006 at 06:37:49PM -0500, William Ballard wrote:
Every so often it treats the middle mouse button as a true
middle mouse button and does the unix paste.
   
   I see what makes it do it: if I press the scroll mouse button
   twice quickly it skips the scroll and does the paste.
  
  My suggestion to you is to get a real mouse. I've never seen one like
  the kind you describe and it sounds pretty crappy. 
 
 It does it it with all mice with scrollwheels - Microsoft and Logitech 
 MX510.  I think the problem is I sometimes accidentally double-click the 
 middle button when I mean to click, hold, scroll.

Then you don't know how to use a mouse wheel. You don't have to click to
scroll !

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-14 Thread William Ballard
On Tue, Feb 14, 2006 at 12:53:26AM -0500, Eric Dorland wrote:
 Sorry, I don't understand. You have a scroll wheel that doesn't act
 like a middle mouse button? Is that right? I've never heard of a mouse
 like that.

No, the problem is it acts like a middle mouse button and a scroll 
button.

I think my problem isn't with Firefox per se but rather than that.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread Eric Dorland
tags 352480 wontfix
thanks

* William Ballard ([EMAIL PROTECTED]) wrote:
 Package: firefox
 Version: 1.5.dfsg-4
 Severity: normal
 
 Firefox has a mode where it will sometimes do a google search on 
 whatever the contents of your clipboard is.  I don't know the exact 
 mouse sequence (I think it's middle button), but I'm sure you know what 
 I'm talking about.
 
 More than once I've had some sensitive data (including passwords) in the 
 clipboard and had the my secret password posted to the internet!
 
 Since this feature is insecure could it be disabled by default?

This is not a security risk, you're still the one who pasted a
password into Firefox. There's only so much a program can do to save
the user from themselves. Won't fix.

-- 
Eric Dorland [EMAIL PROTECTED]
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread William Ballard
On Mon, Feb 13, 2006 at 05:52:29PM -0500, Eric Dorland wrote:
 tags 352480 wontfix
 thanks
 
 * William Ballard ([EMAIL PROTECTED]) wrote:
  Package: firefox
  Version: 1.5.dfsg-4
  Severity: normal
  
  Firefox has a mode where it will sometimes do a google search on 
  whatever the contents of your clipboard is.  I don't know the exact 
  mouse sequence (I think it's middle button), but I'm sure you know what 
  I'm talking about.
  
  More than once I've had some sensitive data (including passwords) in the 
  clipboard and had the my secret password posted to the internet!
  
  Since this feature is insecure could it be disabled by default?
 
 This is not a security risk, you're still the one who pasted a
 password into Firefox. There's only so much a program can do to save
 the user from themselves. Won't fix.

It's a misfeature.  It's too easy to lean on the mouse at the wrong
time and Firefox rockets your clipboard contents off to the internet.

It's not as easy to accidentally lean on the keyboard and press Ctrl+V,
but it's super-easy to accidentally click the middle button.

This is more of a misfeature in X: I could have a bunch of rm commands
in the clipboard and accidentally execute them in xterm;

but in Firefox it's particularly nasty because it just jets off on you.

-50 cool points.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread Eric Dorland
* William Ballard ([EMAIL PROTECTED]) wrote:
 On Mon, Feb 13, 2006 at 05:52:29PM -0500, Eric Dorland wrote:
  tags 352480 wontfix
  thanks
  
  * William Ballard ([EMAIL PROTECTED]) wrote:
   Package: firefox
   Version: 1.5.dfsg-4
   Severity: normal
   
   Firefox has a mode where it will sometimes do a google search on 
   whatever the contents of your clipboard is.  I don't know the exact 
   mouse sequence (I think it's middle button), but I'm sure you know what 
   I'm talking about.
   
   More than once I've had some sensitive data (including passwords) in the 
   clipboard and had the my secret password posted to the internet!
   
   Since this feature is insecure could it be disabled by default?
  
  This is not a security risk, you're still the one who pasted a
  password into Firefox. There's only so much a program can do to save
  the user from themselves. Won't fix.
 
 It's a misfeature.  It's too easy to lean on the mouse at the wrong
 time and Firefox rockets your clipboard contents off to the internet.

It's an excellent feature, one I use multiple times a day.
 
 It's not as easy to accidentally lean on the keyboard and press Ctrl+V,
 but it's super-easy to accidentally click the middle button.
 
 This is more of a misfeature in X: I could have a bunch of rm commands
 in the clipboard and accidentally execute them in xterm;

I generally have enough dexterity and motor control to not find myself
clicking the middle mouse button accidently several times a day. 

I also tend to be of the school of don't cripple your computer just
to make it idiot-proof.

 but in Firefox it's particularly nasty because it just jets off on you.
 
 -50 cool points.

+50 lamer points to you.

-- 
Eric Dorland [EMAIL PROTECTED]
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread William Ballard
On Mon, Feb 13, 2006 at 11:24:45PM -0500, Eric Dorland wrote:
 I generally have enough dexterity and motor control to not find myself
 clicking the middle mouse button accidently several times a day. 

I have a mouse wheel, no middle button.  You press the mouse wheel and 
drag to scroll.  Pressing the mouse wheel and letting go without moving 
results in the contents of whatever you happened to be dragging two 
seconds ago being submitted to the internet.

It's a fucked up feature.

 I also tend to be of the school of don't cripple your computer just
 to make it idiot-proof.

Come on, man.  Click mouse wheel, drag a little, scroll.  Click mouse 
wheel, don't drag, paste contents of clipboard to internet?

It's a fucked up feature.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread William Ballard
I could see it being useful if the focus was on the address bar and not 
on the main window.

On Mon, Feb 13, 2006 at 11:43:47PM -0500, William Ballard wrote:
 On Mon, Feb 13, 2006 at 11:24:45PM -0500, Eric Dorland wrote:
  I generally have enough dexterity and motor control to not find myself
  clicking the middle mouse button accidently several times a day. 
 
 I have a mouse wheel, no middle button.  You press the mouse wheel and 
 drag to scroll.  Pressing the mouse wheel and letting go without moving 
 results in the contents of whatever you happened to be dragging two 
 seconds ago being submitted to the internet.
 
 It's a fucked up feature.
 
  I also tend to be of the school of don't cripple your computer just
  to make it idiot-proof.
 
 Come on, man.  Click mouse wheel, drag a little, scroll.  Click mouse 
 wheel, don't drag, paste contents of clipboard to internet?
 
 It's a fucked up feature.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread Eric Dorland
* William Ballard ([EMAIL PROTECTED]) wrote:
 On Mon, Feb 13, 2006 at 11:24:45PM -0500, Eric Dorland wrote:
  I generally have enough dexterity and motor control to not find myself
  clicking the middle mouse button accidently several times a day. 
 
 I have a mouse wheel, no middle button.  You press the mouse wheel and 
 drag to scroll.  Pressing the mouse wheel and letting go without moving 
 results in the contents of whatever you happened to be dragging two 
 seconds ago being submitted to the internet.

Sorry, I don't understand. You have a scroll wheel that doesn't act
like a middle mouse button? Is that right? I've never heard of a mouse
like that.
 
 It's a fucked up feature.
 
  I also tend to be of the school of don't cripple your computer just
  to make it idiot-proof.
 
 Come on, man.  Click mouse wheel, drag a little, scroll.  Click mouse 
 wheel, don't drag, paste contents of clipboard to internet?

Are you using autoscrolling? I tried it with autoscrolling turned on
and that completely disabled the url pasting feature for me, so that
doesn't seem to be it. 

 It's a fucked up feature.

A brilliant argument, I'm convinced. 

-- 
Eric Dorland [EMAIL PROTECTED]
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-BEGIN GEEK CODE BLOCK-
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
--END GEEK CODE BLOCK--


signature.asc
Description: Digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread Mike Hommey
On Mon, Feb 13, 2006 at 11:43:47PM -0500, William Ballard [EMAIL PROTECTED] 
wrote:
 On Mon, Feb 13, 2006 at 11:24:45PM -0500, Eric Dorland wrote:
  I generally have enough dexterity and motor control to not find myself
  clicking the middle mouse button accidently several times a day. 
 
 I have a mouse wheel, no middle button.  You press the mouse wheel and 
 drag to scroll.  Pressing the mouse wheel and letting go without moving 
 results in the contents of whatever you happened to be dragging two 
 seconds ago being submitted to the internet.
 
 It's a fucked up feature.
 
  I also tend to be of the school of don't cripple your computer just
  to make it idiot-proof.
 
 Come on, man.  Click mouse wheel, drag a little, scroll.  Click mouse 
 wheel, don't drag, paste contents of clipboard to internet?

What kind of mouse wheel is that ? all the ones i tried so far don't
need you to click the wheel before dragging it...


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-13 Thread Patrick Cernko
Hi guys,

to make this unuseful discussion stop now: 1x google with the right
keywords and I got http://thomer.com/howtos/paste_in_firefox.html.
William, just set middlemouse.contentLoadURL to false in about:config
and YOU problem is gone!

For all others: The URL-pasting is a requested feature in firefox. It is
not a Bug at all! The most important indicator for that is, that they
already made a config setting to disable it (did you you of any other
bug where the developers expicitly implemented a switch to disable it?)

I would be very unhappy if Debian would patch such things out of the
code. The next time, someone would request to have the Print feature
disabled in OpenOffice because some Luser DOS'ed his printer in the
office by printing a large document.

Last but not least: Eric, thanks for packaging firefox. You do a great job.
-- 
Patrick Cernko | mailto:[EMAIL PROTECTED]



signature.asc
Description: OpenPGP digital signature


Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-12 Thread Mike Hommey
On Sun, Feb 12, 2006 at 01:10:42AM -0500, William Ballard [EMAIL PROTECTED] 
wrote:
 Package: firefox
 Version: 1.5.dfsg-4
 Severity: normal
 
 Firefox has a mode where it will sometimes do a google search on 
 whatever the contents of your clipboard is.  I don't know the exact 
 mouse sequence (I think it's middle button), but I'm sure you know what 
 I'm talking about.

The google search is a side effect. It uses the X clipboard to fill the
location bar. If you were copying a full url, you'd go to the site. The
thing is that if you don't input a full url, firefox does a google I
feel lucky search.

I'm not exactly sure there's a setting to disable that...

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-12 Thread Krzysztof Sobolewski

Mike Hommey wrote:

Firefox has a mode where it will sometimes do a google search on 
whatever the contents of your clipboard is.  I don't know the exact 
mouse sequence (I think it's middle button), but I'm sure you know what 
I'm talking about.


The google search is a side effect. It uses the X clipboard to fill the
location bar. If you were copying a full url, you'd go to the site. The
thing is that if you don't input a full url, firefox does a google I
feel lucky search.

I'm not exactly sure there's a setting to disable that...


I was told once:
about:config - middlemouse.contentLoadURL - false
So it seems there is one...
-KS

---
Fotoerotica!  http://link.interia.pl/f1904



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352480: firefox: Firefox insecurely leaks contents of clipboard to the internet

2006-02-11 Thread William Ballard
Package: firefox
Version: 1.5.dfsg-4
Severity: normal

Firefox has a mode where it will sometimes do a google search on 
whatever the contents of your clipboard is.  I don't know the exact 
mouse sequence (I think it's middle button), but I'm sure you know what 
I'm talking about.

More than once I've had some sensitive data (including passwords) in the 
clipboard and had the my secret password posted to the internet!

Since this feature is insecure could it be disabled by default?

Thanks

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages firefox depends on:
ii  debianutils   2.15.2 Miscellaneous utilities specific t
ii  fontconfig2.3.2-1.1  generic font configuration library
ii  libatk1.0-0   1.10.3-1   The ATK accessibility toolkit
ii  libc6 2.3.5-12.1 GNU C Library: Shared libraries an
ii  libcairo2 1.0.2-3The Cairo 2D vector graphics libra
ii  libfontconfig12.3.2-1.1  generic font configuration library
ii  libfreetype6  2.1.10-1   FreeType 2 font engine, shared lib
ii  libgcc1   1:4.0.2-8  GCC support library
ii  libglib2.0-0  2.8.6-1The GLib library of C routines
ii  libgtk2.0-0   2.8.10-1   The GTK+ graphical user interface 
ii  libidl0   0.8.5-1library for parsing CORBA IDL file
ii  libjpeg62 6b-11  The Independent JPEG Group's JPEG 
ii  libpango1.0-0 1.10.2-1   Layout and rendering of internatio
ii  libpng12-01.2.8rel-5 PNG library - runtime
ii  libstdc++64.0.2-8The GNU Standard C++ Library v3
ii  libx11-6  6.9.0.dfsg.1-4 X Window System protocol client li
ii  libxcursor1   1.1.3-1X cursor management library
ii  libxext6  6.9.0.dfsg.1-4 X Window System miscellaneous exte
ii  libxft2   2.1.8.2-3  FreeType-based font drawing librar
ii  libxi66.9.0.dfsg.1-4 X Window System Input extension li
ii  libxinerama1  6.9.0.dfsg.1-4 X Window System multi-head display
ii  libxp66.9.0.dfsg.1-4 X Window System printing extension
ii  libxrandr26.9.0.dfsg.1-4 X Window System Resize, Rotate and
ii  libxrender1   1:0.9.0.2-1X Rendering Extension client libra
ii  libxt66.9.0.dfsg.1-4 X Toolkit Intrinsics
ii  psmisc22.1-1 Utilities that use the proc filesy
ii  zlib1g1:1.2.3-9  compression library - runtime

firefox recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]