Hacker News Reader

Comment by kstrauser | Hacker News Reader

iOS already prompts for other things like "app Foo would like to know your location: Never, Only when open, Always". Users are use to this. I'd love a popup like:

"TikTok wants to see what you've copied into your clipboard: Never, Once, Always, Uninstall that spyware".

Then I could make informed decisions, like sure, my package tracker can see if there's a FedEx URL in my clipboard. I'm OK with that. There's literally no reason why I'd ever want Instagram to check my clipboard, though. May you do, and you could give it permission.

View on HN

Yeah, not just "what you've copied into your clipboard", but "Careful! Sometimes you have important confidential data in your clipboard, such as passwords!"

There should also be a log “App foo has used your location at these times: <list of dates>}

They actually have this, and I think its intentionally very creepy: https://support.apple.com/library/content/dam/edam/applecare...

Can I as the user see these logs?

Why is there programmatic access to my clipboard at any time other than when I click paste?

Not every text box is a Cocoa text box, so the paste functionality might need to be handled via code.

Every text box should be a Cocoa text box.

Apple also allows you to share relative location.

A 10 square mile box.

It’s unbelievable that Apple would leave this security hole wide open for so long. Notifying the user is not enough.

I would love to know what OS you're using that requires permissions for foreground app access to the system clipboard.

Other OSes aren't tooting the privacy horn from the top of a mountain.

So you're okay with "massive security holes" as long as their creators aren't "tooting the privacy horn"? Interesting indeed.

Yes, because a 'security hole' isn't a term defined a God. What security holes are holes or not is entirely a matter of user expectation.

Reply on news.ycombinator.com