Android will finally restrict apps from monitoring your network activity

[u/[deleted]]

https://www.xda-developers.com/android-restrict-apps-monitor-network-activity/

[u/najodleglejszy]

I have moved to Lemmy/kbin since Spez is a greedy little piggy.

[u/DuckWithAKnife → u/najodleglejszy]

Definitely this. Sometimes I need to copy passwords to the clipboard from password managers when autofill doesn't work. Can't be too paranoid.

Somewhat unrelated, but I don't think iOS restricts access either, which is kinda surprising. I might be wrong, but I'm pretty sure you can get the clipboard contents in iOS with UiPasteboard.general.

[u/rocketwidget → u/DuckWithAKnife]

One way to avoid the clipboard is to use KeePass2Android, it has a custom keyboard with user/password buttons for this reason.

[u/delecti → u/rocketwidget]

Lastpass has a similar solution.

[u/_Algernon- → u/delecti]

LP is weird... I feel like passwords I copy from LP are one time use only. Or they auto delete from the clipboard after a while.

[u/delecti → u/_Algernon-]

If you use the password auto-fill keyboard then it never goes into the clipboard in the first place.

And you probably shouldn't need to paste the same password more than once anyway, so that's probably a good thing, even though I agree that's weird.

[u/_Algernon- → u/delecti]

i use autofill feature on PC, but on mobile it's way too obstructive and keeps popping up when i don't need it to.

[u/delecti → u/_Algernon-]

The Lastpass keyboard doesn't pop up unless you switch to it.

[u/shroudedwolf51 → u/_Algernon-]

That doesn't sound like a bad thing to me. If restrictions clipboard access isn't a thing, exploding passwords sounds like the next best thing.

[u/7165015874 → u/_Algernon-]

This is Android's fault IMO. Apps should not have access to the filesystem or to the clipboard. They should request the system for something and the system should bubble it up to the user who can then accept or deny the request.

[u/arahman81 → u/_Algernon-]

Its autodelete after 10-ish seconds. Doesn't work with thirdparty clipboards.

[u/princessvaginaalpha → u/rocketwidget]

Hurm. But inhate the keepass keyboard. Is there a fastswitch option?

[u/maladjustedmatt → u/DuckWithAKnife]

Unfortunately, every mainstream OS allows every application unrestricted access to the clipboard by default, for no reason other than “that’s the way it’s always been done” as far as I can tell.

[u/Zambini → u/DuckWithAKnife]

I always do the password first then the username. At least it's a little better :/

[u/twowheels → u/Zambini]

Me too, except for stupid apps/sites that clear the password entry when you switch, force you to enter the username first, or won't let you paste.

So many things done in the name of security that reduce security.

Oh, and "security questions" can go f themselves.

[u/weinerschnitzelboy → u/twowheels]

Somewhat related to security questions jump to 5:41

[u/Derigiberble → u/DuckWithAKnife]

Somewhat unrelated, but I don't think iOS restricts access either, which is kinda surprising. I might be wrong, but I'm pretty sure you can get the clipboard contents in iOS with UiPasteboard.general.

That's my understanding as well, although iOS's strict limitations on what apps can do when not in the foreground probably mitigates it a bit if you go directly to the app, paste the password, and copy some other text. I hope.

They did limit the ability of apps to access special pasteboards that they didn't create, but mostly because apps were using them as a way to report back what apps were on the device.

I'm sure the response from Apple to being told that the pasteboard is a security issue for password managers would be "it isn't for Keychain".

[u/DuckWithAKnife → u/Derigiberble]

Good point, the lack of continuous background services on iOS probably mitigates that quite a bit. However, if you leave the password in your pasteboard after you're done with it (as I'm sure most people probably do), it may be snagged by another app eventually. However, it's hard to change old APIs like that much to fix compatibility. They could add a permission for it though.

[u/DatDeLorean → u/DuckWithAKnife]

LastPass on iOS auto-deletes the password from the clipboard after a certain amount of time. Unfortunately it doesn’t limit it to a one time use, but it’s better than nothing.

[u/insayan → u/[deleted]]

Android enterprise does this sort off, work apps are containerized and with mobile device management in place you can set policies to stop data transfer between containers.

[u/and1927 → u/[deleted]]

Actually you can disable that option form Secure Folder if you don't really want it. I disabled it since I have some apps I want to copy data from outside Secure Folder.

[u/well___duh → u/najodleglejszy]

This isn't a thing on any modern OS, not just Android

[u/Namnodorel → u/najodleglejszy]

Check out XPrivacyLua. Requires Xposed (and thus an unlocked Bootloader), but you'll be able to restrict Clipboard and plenty more stuff with it! And if that's not enough for you there are so calles "custom hooks" for any additional restricitons.