If you assume malware is installed on a computer, typing a password using a keyboard is not safe either...
Keyloggers require hooking the keyboard driver, which although isn't extremely complicated in it of itself, still somewhere along the way has to get past User Account Control to install.
The clipboard is free and open access to any and all programs though, foreground, background, whatever. It doesn't require someone to click Paste to access the clipboard, a background program can very easily silently query the contents of the clipboard.
TL;DR - Clipboard is quite a bit easier to access than keystrokes from the keyboard driver. It's like the last place I'd wanna put my sensitive info.
That's just BS. Keyloggers only need to a simple win api call (SetWindowsHookEx with WH_KEYBOARD_LL) and you are good to go. No admin rights required. You won't get events from elevated processes, but browsers run in regular userspace so you can capture everything.
So you mean Windows Defender and UAC still don't flag that as suspicious and require admin privileges?
Well damn, all the more reason I switched to Linux in 2015. Today I learned.
thanks for using Leebra!
go to feed...
You do realize that any program can access the clipboard right? Having your private information copied in the clipboard completely defeats the entire purpose of security.
Might as well put your private info on a bumper sticker for all to see.
save