Security concern: copying from Preferences UI copies Notes data

Options
Chris Messina
Chris Messina
Community Member
in Desktop betas (Mac, Windows, and Linux)

To reproduce:

  1. Create a New Item with Notes¹
  2. Type some notes and save the item²
  3. Open Preferences
  4. Go to About section
  5. Click on the build number (or any of the selectable text)³
  6. Hit ⌘-a to select all the text, then ⌘-c to copy
  7. Paste the text into a text editor
  8. 😱

You'll notice that all of the Preference menu items are captured as well as the contents of the Notes field, and the last modified and created timestamps.

This is bad in the case where you go to copy the build information to report a bug to the 1Password forum and nearly paste your crypto wallet seed phrases into a public textbox!! 😰

1Password Version: 8.7.0
Extension Version: Not Provided
OS Version: macOS Monterey 12.3 (21E230)

Comments

  • MikeT
    MikeT
    Options

    Hi @Chris Messina,

    Thanks for reporting this. I can reproduce the issue, the copy all command didn't stop at the Settings modal, so it selected the content under it as well.

    We'll get this fixed as soon as possible.

  • Chris Messina
    Chris Messina
    Community Member
    Options

    Yep, that's what I assumed happened! Cheers!

  • PeterG_1P
    PeterG_1P
    Options

    Thanks for letting us know, @Chris Messina. We're happy to make the fix!

This discussion has been closed.