|Thread title||Replies||Last modified|
|KDE Connect URL and Clipboard Sharing||2||12:22, 7 May 2019|
|Konqueror support?||1||14:59, 17 October 2018|
|Troubleshooting||0||12:52, 11 May 2018|
|iPhone App for KDE Connections||1||01:25, 19 March 2017|
I've recently started using KDEconnect... My only issue is that the clipboard sharing and URL sending present a possible security risk.
While the idea is sound that I can share my clipboard with my phone, there is no influencing what is shared. I could copy a huge swath of text or other sensitive information, and end up with that on my phone without knowing, and then accidentally paste.
Similarly, the URL sharing automatically opens the URL on my desktop or my phone, which could create a pathway for malware infecting my phone to cause my computer to open a dangerous website.
Would the sane behaviour not be to specifically open a url from the KDE connect notification or under the connect taskbar widget? Should there not be some settings or at least a way of modifying the clipboard sharing... say a KDE connect manual send?
- I'm still getting into QT coding and hope to add patches, but at the moment this is outside of my abilities.
Being conscious of security is always wise, but it's worth noting that the connection between two devices in a KDE Connect network is:
- Paired — KDE Connect doesn't accept clipboard or URL transfers from just any arbitrary devices, only ones it recognizes and has already established a pre-existing relationship with.
- Bi-directionally confirmed — User action has to be taken on both ends of the connection, in order to establish a new pairing link; an unknown device can't pair with your phone, or with your computer, without you having to authorize the pairing request.
- Encrypted — Once the pairing is established, every communication over the link is end-to-end encrypted. None of the content transferred from one device to another is ever visible to the outside world, and any attempts by the outside world to hijack that connection and insert malicious data will be ignored without the proper encryption.
The intent is to make the relationship between the two devices secure enough that they can be treated as extensions of each other. Absent any bugs or security flaws, syncing your clipboard's contents to a paired device shouldn't carry significantly more risk than placing that data in the clipboard in the first place.
In fact, I've also noticed the problem of security. But if the sharing of clipboard always needs a confirmation/notification, it will be noisy and not so convenient. We should balance security and convenience.
You are reasonable, but maybe we can make it configurable in the plugin rather than always showing notifications. Users can choose whether they'd like to directly share clipboards between devices.
When I click the Nokia 6 icon in Dolphin, it opens. When I try the same in Konqueror, it presents me with an error "Unsupported Protocol kdeconnect". Is this fixed in Kubuntu 16.04 LTS or should I upgrade to later versions?
The message function of the wiki is not a very reliable communications platform. I only by chance logged in today! For better support, try our mailing list: [email protected] or our Telegram group, which is linked at the bottom of our wiki page. To answer your question, I didn't even know Konqueror had KDE Connect support. I can't see any icon in my installation, so I don't know how to test my newer version. However, there is a newer version of KDE Connect in 18.04 than in 16.04, so if you do decide to upgrade, you will get a few new features!
Referring to following sentence „Currently there are KDE Connect clients on KDE, Android and Blackberry, and soon we will support iPhone as well.” I have a question.
When will the iPhone App be available or how is the current state?
I am also interested as Beta-tester.
That sentence seems very inaccurate. Albert Vaca's blog has a post from October 2013 that says Publish and maintain the iOS port that Yang Qiao begun this GSOC (any iPhone user around?) but no one has updated kdeconnect-ios source code on https://cgit.kde.org/ since 2014. And there's no evidence of a Blackberry port. I know little about this project but I rewrote big chunks of the KDEConnect page to be, I hope, more accurate.