I really struggle with clipboard history apps because they are not very far from a keylogger and I don't want to have to trust a developer or third-party code with the contents of my clipboard. Am I being irrational?
Do you only use first party applications otherwise? Any macOS application can poll NSPasteboard and extract your clipboard history and so I don’t see the particular concern with this class of applications.
That’s entirely rational but unless you build from source (and honestly even if you do) there’s an attack vector present. The only real alternative is to review and allow list outgoing network traffic
I use Little Snitch religiously and for third-party apps I use occasionally I'm very pedantic with allowing them 10 minutes of network access at a time. It sounds painful to manage but in practice only a few apps are super chatty. Apps that are my daily drivers get more generous network access rules.
Comments
I really struggle with clipboard history apps because they are not very far from a keylogger and I don't want to have to trust a developer or third-party code with the contents of my clipboard. Am I being irrational?
Do you only use first party applications otherwise? Any macOS application can poll NSPasteboard and extract your clipboard history and so I don’t see the particular concern with this class of applications.
That’s entirely rational but unless you build from source (and honestly even if you do) there’s an attack vector present. The only real alternative is to review and allow list outgoing network traffic
I use Little Snitch religiously and for third-party apps I use occasionally I'm very pedantic with allowing them 10 minutes of network access at a time. It sounds painful to manage but in practice only a few apps are super chatty. Apps that are my daily drivers get more generous network access rules.
Passwords are excluded from clipboard history if everything is done correctly.