2009-06-11 02:47:23 UTC
Hello, happy developers (and the others idem).
Thanks for this really useful app!
Though I really like it, I have some concerns about the "secure clipboard" feature. It looks like Keepass can't really protect against clipboard monitors, so should it really advertised in the features page on the website?
I'm not only here to complain and annoy you, I want to know if it could be solved. Maybe using RemoveClipboardFormatListener for any window adding itself to the clipboard listener. I see that in PwSafeDlg.cpp, some code is attempting to remove the clipboard listeners already present. Shouldn't ChangeClipboardChain have two parameters?
Also, I think it would be possible to monitor the addition of clipboard listeners using GetClipboardViewer. Obviously, an eventual keylogger could do the same thing, so it's not a real solution...
Anyway, I' like to hear your thoughts about it, not really because I'm afraid of keyloggers, but more because I like to get into the code :)
Good night!