Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

With Firefox on X11, any page can pastejack you anytime (middle button paste)

openwall.com

Post reply on HN
Print view View original

41–50 of 195 posts

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#41

Post by Aardwolf »

macNchz wrote: post #31

The X “primary selection”/middle click paste behavior this takes advantage of is one of my least favorite Linux features and I have had it disabled for years, so I didn’t even know it had been changed/removed in Wayland. Having a single mouse button (that often has other functionality like autoscroll in Firefox) cause text highlighted in another app to paste in the focused app is super unintuitive to me, and caused a…

I love middle click paste, in combination with ctrl+c/ctrl+v paste it's a second clipboard, which allows to do one kind of refactoring in between doing some other refactoring in code (as just one example).

I didn't know wayland doesn't support that either, one more thing to add to the list of things it doesn't support like screenshots, xclip, mouse/keyboard automation, etc...

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#42

Post by tannhaeuser »

somat wrote: post #33
demondemidi wrote: post #28

You guys have a middle button? Maaaan. :) Edit: did y'all miss the smiley at the end of my comment?

The trick with a laptop are Thinkpads. some models have three physical "mouse" buttons. I was not looking for this as a feature when I bought one a few years ago but it had them and it has proved the thing I like about the machine the most.

On an x13 2nd gen running Ubuntu 22 LTS with Wayland + libinput, middle-finger ^H^H^H middle-button paste generated by the touchpad driver was almost always triggered instead of right-click, which turned out so annoying, in addition to having lost kinetic scroll/device-specific coefficients, that I left Linux for good and switched to Mac OS instead, which I had already been using 2003-2009.

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#43

Post by arp242 »

pkulak wrote: post #17

Well yeah, this is one of the core issues that Wayland was built to address. X11 has zero security.

It's not. Wayland has a similar primary selection mechanism, and has the same problem. Firefox tells (X11|Wayland) that the text is selected, so that's what gets pasted, because that's how the entire thing works. The article even mentions this.

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#44

Post by [deleted] »

Aardwolf wrote: post #41
macNchz wrote: post #31

The X “primary selection”/middle click paste behavior this takes advantage of is one of my least favorite Linux features and I have had it disabled for years, so I didn’t even know it had been changed/removed in Wayland. Having a single mouse button (that often has other functionality like autoscroll in Firefox) cause text highlighted in another app to paste in the focused app is super unintuitive to me, and caused a…

I love middle click paste, in combination with ctrl+c/ctrl+v paste it's a second clipboard, which allows to do one kind of refactoring in between doing some other refactoring in code (as just one example). I didn't know wayland doesn't support that either, one more thing to add to the list of things it doesn't support like screenshots, xclip, mouse/keyboard automation, etc...

[deleted]

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#45

Post by gpvos »

somat wrote: post #33
demondemidi wrote: post #28

You guys have a middle button? Maaaan. :) Edit: did y'all miss the smiley at the end of my comment?

The trick with a laptop are Thinkpads. some models have three physical "mouse" buttons. I was not looking for this as a feature when I bought one a few years ago but it had them and it has proved the thing I like about the machine the most.

That is a strong recommendation for me! I really hope three-button mice (no scrollwheel) will make a comeback.

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#46

Post by mainpassathome »

Aardwolf wrote: post #41
macNchz wrote: post #31

The X “primary selection”/middle click paste behavior this takes advantage of is one of my least favorite Linux features and I have had it disabled for years, so I didn’t even know it had been changed/removed in Wayland. Having a single mouse button (that often has other functionality like autoscroll in Firefox) cause text highlighted in another app to paste in the focused app is super unintuitive to me, and caused a…

I love middle click paste, in combination with ctrl+c/ctrl+v paste it's a second clipboard, which allows to do one kind of refactoring in between doing some other refactoring in code (as just one example). I didn't know wayland doesn't support that either, one more thing to add to the list of things it doesn't support like screenshots, xclip, mouse/keyboard automation, etc...

it doesn’t not support it, it doesn’t set this unexpected behaviour as default

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#47

Post by snailmailman »

macNchz wrote: post #31

The X “primary selection”/middle click paste behavior this takes advantage of is one of my least favorite Linux features and I have had it disabled for years, so I didn’t even know it had been changed/removed in Wayland. Having a single mouse button (that often has other functionality like autoscroll in Firefox) cause text highlighted in another app to paste in the focused app is super unintuitive to me, and caused a…

It annoys me so much. I’ve tried to disable but none of the methods I’ve seen have worked for me. I use middle click to autoscroll, and to open things in new tabs or to close tabs.

Then I try to middle click autoscroll in discord or something (which works in windows!) and I’ll paste in information that I don’t intend to.

This is the first I’m hearing about Wayland fixing this. Maybe I’ll give Wayland yet another try soon.

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#48

Post by aruggirello »

demondemidi wrote: post #28

You guys have a middle button? Maaaan. :) Edit: did y'all miss the smiley at the end of my comment?

You can set up eg. a 3-finger touchpad tap gesture for the middle button in KDE Plasma, I'm assuming the same should be possible under GNOME. No need for fancy touchpads.

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#49

Post by yndoendo »

macNchz wrote: post #31

The X “primary selection”/middle click paste behavior this takes advantage of is one of my least favorite Linux features and I have had it disabled for years, so I didn’t even know it had been changed/removed in Wayland. Having a single mouse button (that often has other functionality like autoscroll in Firefox) cause text highlighted in another app to paste in the focused app is super unintuitive to me, and caused a…

I cannot stand any Operating System that does not utilize left-click highlight and middle click paste. This is great secondary buffer to the clipboard Ctrl+C && Ctrl+V. I HATE the middle click scrolling feature that Windows uses, it is not user-friendly and not needed in the age of the scroll-wheel. Another reason you have to pay me to use Windows.

Re: With Firefox on X11, any page can pastejack you anytime (middle button paste)

#50

Post by ndriscoll »

Zetobal wrote: post #2

Who pastes something and executes it without a second look?

Why is it so easy to find people in this industry who don't care that users can't trust their own computers (or, by extension, anything they own with a computer in it, which is quickly becoming everything)?

If I select some text and press Ctrl+C, it should copy the text I selected. The user intent is obvious. There's no excuse for the ability to hijack the clipboard to exist in the first place.

Web pages shouldn't be able to modify my selection. Why is there even an API for this?

The web ecosystem (including browsers) turned straight up malicious like 15 years ago, and users became nothing more than a product for everyone involved. That cancer has even metastasized and spread to the OS or even products that people pay thousands or tens of thousands of dollars for. I don't know how people who think that way can live with themselves.

Post reply on HN