Skip to content
NewA calmer, faster ZeroHour

Linux Zoom Client Proactively Reads X11 Clipboard

Lobsters · securityby hachyderm.io via darleaf ()3
AI summary · glm-5.3-flashSummaries by Vani AI

Simon Tatham reports that Zoom's Linux client proactively reads the X11 clipboard, potentially exposing copied passwords and other sensitive data.

A Mastodon post by Simon Tatham, shared via Lobsters, reports that the Linux Zoom client proactively reads the X11 system clipboard rather than accessing it only on explicit paste. Because X11 allows any running application to query clipboard contents, secrets such as copied passwords or tokens may be captured by the app. The observation highlights the broader privacy gap between X11's unrestricted clipboard access and more restricted display servers like Wayland.

Key facts
  • Linux Zoom client reads the X11 clipboard proactively, not only when the user pastes
  • X11 lacks per-application clipboard access controls, enabling silent clipboard monitoring
  • Copied passwords, tokens, or other secrets could be exposed to the application
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

Lobsters · security

By hachyderm.io via darleaf · hachyderm.io

Read the full article at Lobsters · security

The article text could not be read from this site (paywall or bot protection). Summary, key facts and assessment above are AI-written from the article and can be wrong.