Hacker News new | ask | show | jobs
by weejewel 654 days ago
Years ago when I was a student, and JavaScript could get a user’s clipboard without their consent, I made a website ‘getpasted’ that automatically pasted and posted your clipboard to a public database.

Needless to say, some people weren’t happy about it. But it was a nice project to create awareness that it was possible to read the clipboard at any time.

1 comments

Wait until people find out that by default on Windows 11 all of your clipboard data gets sent to a Microsoft server via Clipboard History / Cloud Clipboard.
Clipboard history and sync across devices are both disabled by default, as far as I'm aware.
Hmmm. My work machine had them on, but I suppose that could have been set by policy. I will check my Aya Neo later (only personal Win11 device).
Is Apple’s version of this any better? Clipboard is synced between phone/computers logged into iCloud although it doesn’t log history (at least visibly)
It requires iCloud but the data itself is transferred directly over Bluetooth or local WiFi (like airdrop) so it shouldn’t hit any Apple servers.

https://support.apple.com/en-gb/guide/security/secf78dbe639/...

Since it is also end-to-end encrypted, an architecture involving Apple server wouldn't reveal the contents either.
Even when not signed in with a Microsoft account?