I most definitely do not want to have this information retained in an unencrypted format on my hard disk. I would be much happier if it was stored in RAM and purged every time QS was restarted. I'm quite sure that the vast majority of users who use this feature would also agree if informed of the security implications. I use LastPass, a Chrome extension, to generate complex passwords and often copy and paste them. Imagine my horror when I saw everything I was trying to keep secure easily visible in plain text in a folder that had grown to several MBs in size. I'd even like to have an option to purge (secure delete) the clipboard history at a specified interval as I regularly go for days or even weeks without rebooting my computer
For now, I'm disabling the plugin and I have to check my Time Machine Backups even though those can not be deleted securely. :/ I'll add a TM exception for this folder as well in case I enable the plugin again in the future. I don't even want it backed up encrypted. Thanks for listening and for all your hard work guys! --E On Friday, April 19, 2013 8:38:57 AM UTC+7, Patrick wrote: > > > ... who says the history needs to be available across launches? I would > *much* prefer the data to be cleared, even considering how often I restart > Quicksilver for development. > > Then I guess adding some kind of preference to the Quicksilver pane may > well be useful for some people like you. I for one like it across > relaunches :) > > On 19 April 2013 08:33, Lucas Garron <[email protected] <javascript:>>wrote: > >> ... who says the history needs to be available across launches? I would >> *much* prefer the data to be cleared, even considering how often I restart >> Quicksilver for development. >> >> »Lucas Garron >> >> >> On Thu, Apr 18, 2013 at 6:30 PM, Patrick Robertson >> <[email protected]<javascript:> >> > wrote: >> >>> Quicksilver needs to write to disk so that the clipboard history is >>> available across relaunches. You're right it should probably be encrypted >>> or something similar, but for the time being this isn't possible. >>> >>> At the moment it's up to you to weigh the security risks with the >>> difficulty of deleting the items manually/upon relaunch >>> >>> >>> On 19 April 2013 06:23, Lucas Garron <[email protected] >>> <javascript:>>wrote: >>> >>>> I also still find this an issue. I don't want the history going to >>>> disk, so I do the following (until I have time to poke into the plugin and >>>> fix it): https://gist.github.com/lgarron/2723882 >>>> >>>> »Lucas Garron >>>> >>>> >>>> On Thu, Apr 18, 2013 at 3:57 PM, Leveebreaks >>>> <[email protected]<javascript:> >>>> > wrote: >>>> >>>>> I have recently tried the clipboard plugin and I too was concerned >>>>> about security and found this thread. I'm using the latest version >>>>> (1.2.2) >>>>> and it still saves the clipboard history to disk in ~/Library/Application >>>>> Support/Quicksilver/Shelves/QSPasteboardHistory.qsshelf >>>>> >>>>> I know that I can clear the history, but I assume that doesn't do a >>>>> secure erase of QSPasteboardHistory.qsshelf? >>>>> >>>>> Yes, I have excluded applications such as 1Password but that doesn't >>>>> affect the browser extensions. And I don't want to exclude all of Safari. >>>>> >>>>> Btw, what's the relation between the Clipboard plugin and the Shelf >>>>> plugin? Only with Shelf plugin installed I get the Clipboard History >>>>> catalog added. >>>>> >>>> -- You received this message because you are subscribed to the Google Groups "Quicksilver" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/blacktree-quicksilver?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
