-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2017-05-21 16:23, Marek Marczykowski-Górecki wrote:
> On Sun, May 21, 2017 at 01:45:42PM -0500, Andrew David Wong wrote:
[...]
>> It's an interesting idea. I don't know how useful it would be to most
>> users. Would most users understand it? Would they even read it? If we
>> make the messages even longer by adding the "examples," it seems even
>> less likely they would read it. Trying to report the content type
>> might require too much parsing.
> 
>> What do you think, Marek?
> 
> Guessing content type here IMO is a bad idea - it would require parsing
> arbitrary complex file format in dom0 (*), so would be a huge attack
> surface. But just clipboard size is perfectly possible. I don't think it
> would be meaningful security feature (if you expect 2.5 kiB data, it can
> be still 2.5 kiB data, but completely different), but could be useful
> for spotting user errors (missing Ctrl-C before Ctrl-Shift-C or so).
> 
> (*) well, you could imagine using DispVM for that, but starting new
> DispVM just for showing a bit more verbose message looks like an
> overkill.
> 

Issue created: https://github.com/QubesOS/qubes-issues/issues/2825

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=whFb
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/c041506b-3a0d-77b4-47aa-c330a76543cc%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to