How to uninstall Clipboard? Removing doesn't work from Discover. This showed my password!

The Diodon aims to be the best clipboard manager for Unity desktop manager but when I tested it on GNOME and KDE, it worked just fine.

Here are some interesting features of Diodon:

Support for tray icon support by default
Ability to sync clipboards
Pastes selected items automatically
Image support 

Except " * Pastes selected items automatically" which I’m not sure what it means, Plasma’s clipboard does all of the other stuff.

If you try it, please report :grinning:

I think you guys are looking at this all wrong.

Use a password manager to handle passwords and sensitive information like credit card number and such. They are DESIGNED for this kind of stuff! A clip board manager is not.

That way you passwords will NEVER be in any clipboard application AT ALL.

At the end of the day, it is up to the USER to make sure NOT TO COPY SENSITIVE INFORMATION into a desktop shared clipboard application.

4 Likes

Pretty much.

In addition, for apps that do let you copy passwords, there’s a way for them to set a MIME hint with the paste data that makes it not appear visibly in the clipboard or get remembered in the history; see for example 156547 – Passwords copied from kwalletmanager should not appear in klipper. As you can see, we don’t even set this for all of our own apps! So there’s low-hanging fruit there.

5 Likes

KDE made its name with its versatility and the options the user has to customize his DE as they see fit, a simple optional activation of an auto-delete in clipboard after one minute for example, would be just more KDE-ish.

1 Like

Not sure what freedom has to do with anything here.

That is a fair request, but not really doing anything for security for you sensitive info. If there is something spying, it will run immediately, not wait.
But it is a very fair feature request to make.

But again, it is UP TO THE USER TO MAKE SURE your data is safe, and the way to do that is use tools made for each and every task, and a password manager is designed just for this.

My password manager even does exactly what you ask for, I’ll post it again:
image

This is in case you use their “copy to clipboard” function instead of the smart way of letting the manager paste everything in your browser or application.

1 Like

To be fair, BitWarden’s “Clear Clipboard” will not help you with a clipboard manager.

What it does after 10 seconds (or however much you’ve set it to) is to check that if the current clipboard entry is still the same as the password you just copied, then BitWarden will assert that it owns the clipboard and that it has nothing to share (I’m not sure if it setting the clipboard value to the empty string or to null but it doesn’t really matter). If you have a clipboard manager - or Plasma’s clipboard for that matter - then the clipboard entries list will still show the copied password and you can still select it and paste your password again. BitWarden won’t even try to delete it again - it will just leave it there.

Unfortunately there’s no affordance in the Wayland data sharing API for “secret data” or “short lived data” - even the Plasma Clipboard support for “do not store”, mentioned by @ngraham, is kind of a hack and evidently unsupported by any password manager (including KDE’s own). This is definitely something that should be fixed at the Wayland protocols level.

Thank you guss77, this was what I was looking for, I come from Windows and the clipboard works thus copying everything but not showing it in the System Tray like a popup. I have Kde Neon 6 and I love, but this was the only thing that bothered me that everything your copies show it in the System Tray. I chose “always hidden” as an option and works as expected.

That one is actually not an unreasonable request. While in some cases it may be seen as annoying feature, I can also see it as an improvement. For example, my Google Pixel phone’s keyboard keeps a clipboard history only for the last one hour.

Also, looking at Android, it seems there are content/mime type hints being used as well, because whenever I’m actually copying credentials from KeePass, the clipboard button shows them as ***** instead of an actual content. So that’s something to look into replicating as well.

4 Likes

Exactly this! The current clipboard phenomena is not at all trivial as we come to think of it more now. Currently indeed everything copied (possible passwords and what not) are “just there” behind one button on the desktops right bottom corner on the clipboard application. Hmmh.

I made proposal a year ago to make Klipper a separate stand-alone application: 470947 – [Enhancement] Make Klipper standalone application so that it can be installed as a plugin if needed.

It’s frustrating that many users ask for disabling Klipper, yet the response is:

In either case, we are not making such a change based on this reasoning.

2 Likes

Because the request doesn’t make any sense. As has been explained, if Klipper were disabled entirely, basic clipboard functionality like being able to paste data that came from an app that isn’t running would break.

What you guys actually want is a way to not show the history visually. You need to be either requesting that, or else just describe the problem and let the developers figure out a good solution. Suggesting your own solution runs into the risk of exactly what happened here: it’s a bad solution and gets rightfully rejected by the developers, and then the underlying concern doesn’t get resolved.

See also Get Involved/Issue Reporting - KDE Community Wiki

I think the problem is basically, for many, that the clipboard is right there on the desktop right next to Volume button very visually tellingly for any passer by to check out and potentially exploit.

Numerous users don’t even realize that all they copy in means of pasting is recorded behind that desktop icon :thinking:

Obviously there is some type of problem here.

At very least; there could be an option to set a time frame by the user when all of the clipboard history is erased.

Note that the “autofill/autotype” feature does not work with Wayland (apparently because Wayland’s security concepts prevent it).

1 Like

I know X11 has problems, but the tradeoffs Wayland made break a lot of functionality I rely on. I use the autotype function and AutoKey desktop automation many times every day.

1 Like

the issue as I read it is that sensitive information can be viewed from the clipboard icon. That’s by design, if you put sensitive information in the clipboard you should delete your clipboard history or delete the sensitive information from your history after you’ve used it.

But so many people don’t simply realize, that their copy pasted stuff remains in an extensive historical pastes list, right there behind the desktop panel icon.

This is not the case for example in GNOME desktop; the information has to be dug out more or less with effort; not just clicking a clipboard picture “just like that”.

So - there could at least for example be some sort of time limit when all history of clipboard is to be erased (if user sets it to do so).

If you’re worried about any passer-by reading your clipboard history and looking at copied passwords, then lock the system when you walk away from the computer, and that threat is neutralized. It’s why we have a lock screen. :slight_smile: Because even if the clipboard history weren’t visible, said passer-by could do all kinds of mischief on an unlocked system: delete or steal your files, read your emails, open your maybe-still-unlocked password manager app and steal all the passwords, etc.

If you care about security, lock your screen when you leave the computer.

5 Likes

You can set the clipboard history size to 1.

Without a “clipboard picture”, you can just click on the Kickoff icon (or press Meta in GNOME) then press Ctrl-V, and that would show you the last copied stuff. I think this is about as “just like that” as a size-1 clipboard history.