{"action":"created","issue":{"url":"https://api.github.com/repos/keeweb/keeweb/issues/1015","repository_url":"https://api.github.com/repos/keeweb/keeweb","labels_url":"https://api.github.com/repos/keeweb/keeweb/issues/1015/labels{/name}","comments_url":"https://api.github.com/repos/keeweb/keeweb/issues/1015/comments","events_url":"https://api.github.com/repos/keeweb/keeweb/issues/1015/events","html_url":"https://github.com/keeweb/keeweb/issues/1015","id":368347108,"node_id":"MDU6SXNzdWUzNjgzNDcxMDg=","number":1015,"title":"Run on alternate dekstop","user":{"login":"Bodup","id":29832921,"node_id":"MDQ6VXNlcjI5ODMyOTIx","avatar_url":"https://avatars2.githubusercontent.com/u/29832921?v=4","gravatar_id":"","url":"https://api.github.com/users/Bodup","html_url":"https://github.com/Bodup","followers_url":"https://api.github.com/users/Bodup/followers","following_url":"https://api.github.com/users/Bodup/following{/other_user}","gists_url":"https://api.github.com/users/Bodup/gists{/gist_id}","starred_url":"https://api.github.com/users/Bodup/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Bodup/subscriptions","organizations_url":"https://api.github.com/users/Bodup/orgs","repos_url":"https://api.github.com/users/Bodup/repos","events_url":"https://api.github.com/users/Bodup/events{/privacy}","received_events_url":"https://api.github.com/users/Bodup/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-10-09T18:50:01Z","updated_at":"2018-10-09T21:18:57Z","closed_at":null,"author_association":"NONE","body":"**TL;DR**\r\nRun KeeWeb on a different Desktop (see [here](https://docs.microsoft.com/en-us/windows/desktop/winstation/window-station-and-desktop-creation)) for GUI isolation.\r\n\r\n\r\n**Longer version**\r\nChrome and Firefox run their processes in desktops other than the default Winsta0\\Default (e.g Service-0x0-105f127$\\sbox_alternate_desktop_0x3194).\r\nThis prevents them from hooking into other Windows, in case the process is compromised by an attacker.\r\n\r\nKeePass allows the user to enter his/her master password on the \"secure desktop\" (It's not actually the same desktop that UAC uses, instead it makes it look as if it is by setting a dimmed screenshot as it's background image). This prevents other programs from reading what's being typed in the master password prompt.\r\n\r\n**My suggestion**\r\nMy suggestion would be for KeeWeb to run on a different desktop other than Winsta0\\Default (without this being visible to the user, just like with Chrome and Firefox). This isolates its GUI from other applications. \r\n\r\n(I personally run KeeWeb as an administrator because its higher integrity level prevents other programs from interacting with it. e.g reading it's memory contents. But that doesn't really help if it's running on the same desktop; any application can hook into its GUI and read what's inside.)"},"comment":{"url":"https://api.github.com/repos/keeweb/keeweb/issues/comments/428356217","html_url":"https://github.com/keeweb/keeweb/issues/1015#issuecomment-428356217","issue_url":"https://api.github.com/repos/keeweb/keeweb/issues/1015","id":428356217,"node_id":"MDEyOklzc3VlQ29tbWVudDQyODM1NjIxNw==","user":{"login":"antelle","id":633557,"node_id":"MDQ6VXNlcjYzMzU1Nw==","avatar_url":"https://avatars2.githubusercontent.com/u/633557?v=4","gravatar_id":"","url":"https://api.github.com/users/antelle","html_url":"https://github.com/antelle","followers_url":"https://api.github.com/users/antelle/followers","following_url":"https://api.github.com/users/antelle/following{/other_user}","gists_url":"https://api.github.com/users/antelle/gists{/gist_id}","starred_url":"https://api.github.com/users/antelle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antelle/subscriptions","organizations_url":"https://api.github.com/users/antelle/orgs","repos_url":"https://api.github.com/users/antelle/repos","events_url":"https://api.github.com/users/antelle/events{/privacy}","received_events_url":"https://api.github.com/users/antelle/received_events","type":"User","site_admin":false},"created_at":"2018-10-09T21:18:57Z","updated_at":"2018-10-09T21:18:57Z","author_association":"MEMBER","body":"Not sure if it's possible in Electron, but it would be nice to have of course."}}
{"actor":{"display_login":"antelle"}}