Forum Discussion

Anonymous's avatar
Anonymous
4 years ago

Security concern: copying from Preferences UI copies Notes data

To reproduce:

  1. Create a New Item with Notes¹
  2. Type some notes and save the item²
  3. Open Preferences
  4. Go to About section
  5. Click on the build number (or any of the selectable text)³
  6. Hit ⌘-a to select all the text, then ⌘-c to copy
  7. Paste the text into a text editor
  8. 😱

You'll notice that all of the Preference menu items are captured as well as the contents of the Notes field, and the last modified and created timestamps.

This is bad in the case where you go to copy the build information to report a bug to the 1Password forum and nearly paste your crypto wallet seed phrases into a public textbox!! 😰

1Password Version: 8.7.0
Extension Version: Not Provided
OS Version: macOS Monterey 12.3 (21E230)

betas

3 Replies

  • 1P_PeterG's avatar
    1P_PeterG
    Icon for Community Manager rankCommunity Manager
    4 years ago

    Thanks for letting us know, @"Chris Messina". We're happy to make the fix!

  • Anonymous's avatar
    Anonymous
    4 years ago

    Yep, that's what I assumed happened! Cheers!

  • MikeT's avatar
    MikeT
    Icon for 1Password Team rank1Password Team
    4 years ago

    Hi @"Chris Messina",

    Thanks for reporting this. I can reproduce the issue, the copy all command didn't stop at the Settings modal, so it selected the content under it as well.

    We'll get this fixed as soon as possible.