# Security Policy & Threat Model

ClipTyper is designed from the ground up for use by IT professionals, system administrators, and security-conscious users. This document describes ClipTyper's security posture, threat model, and vulnerability reporting procedures.

---

## 🔒 Zero Telemetry & Privacy Commitment

* **Zero Telemetry:** ClipTyper collects, logs, and transmits **zero telemetry or analytics**.
* **Zero Cloud Services:** ClipTyper has no backend servers and relies on no cloud infrastructure.
* **Network Activity:** The **only** network interaction is an optional, throttled check against the public GitHub Releases API (`https://api.github.com/repos/unpaved028/ClipTyper/releases/latest`) to inform users of new releases. This can be disabled in Settings at any time.
* **No Credential Persistence:** Clipboard contents and auto-typed credentials are processed entirely in volatile memory and are **never** written to disk or configuration files. Exact character counts of credentials are intentionally excluded from logs.

---

## 🛡️ Threat Model

### What ClipTyper Does
* Reads the current Windows Clipboard content upon user trigger (global hotkey or overlay button click).
* Simulates standard keyboard input using the Windows `SendInput` API into the currently focused foreground window.
* Persists user preferences locally in a standard JSON file (`settings.json`).

### What ClipTyper Does NOT Do
* **Does NOT hook system-wide keystrokes:** ClipTyper is not a keylogger. It registers specific Windows global hotkeys via `RegisterHotKey` and does not install low-level keyboard hooks (`WH_KEYBOARD_LL`).
* **Does NOT monitor clipboard history:** ClipTyper reads the clipboard **only** when explicitly triggered by the user. It does not run clipboard listeners or retain clipboard history.
* **Does NOT bypass Windows security controls:** ClipTyper respects Windows User Interface Privilege Isolation (UIPI). A non-elevated ClipTyper process cannot inject keystrokes into elevated (Administrator) windows without user awareness.
* **Does NOT require Administrator privileges:** ClipTyper runs entirely in standard user space (Medium Integrity Level).

---

## 🛑 Windows Security & Isolation Boundaries

### User Interface Privilege Isolation (UIPI)
Windows prevents lower-integrity applications from sending input messages to higher-integrity windows. When ClipTyper detects that the active target window is elevated while ClipTyper is running as a standard user, it alerts the user with an elevation warning dialog.

### Credential Auto-Type Safety
When using two-stage credential typing:
1. ClipTyper performs an active focus verification check between Stage 1 (Username) and Stage 2 (Password) to ensure focus was not stolen.
2. Trailing line terminators are trimmed from the password stage to prevent unintended form submission.
3. An optional post-type clipboard auto-clear feature is available to immediately purge sensitive passwords from the Windows clipboard after typing.

---

## 🔍 Antivirus & EDR Heuristic Detections (False Positives)

Because ClipTyper calls native Windows APIs (`SendInput`, `RegisterHotKey`, `AttachThreadInput`) to simulate raw keystrokes and restore window focus in RDP environments, some Endpoint Detection and Response (EDR) or Antivirus engines may flag it heuristically.

ClipTyper is 100% open-source C# with no obfuscation. We encourage security teams and administrators to review and build the source code directly:
* Reproducible build instructions are available in [CONTRIBUTING.md](CONTRIBUTING.md).
* Cryptographic release checksums (`SHA256SUMS.txt`) are provided with every GitHub release.
* VirusTotal (latest installer, v1.6.1): [0 detections / 68 engines](https://www.virustotal.com/gui/file/aa6c70205c1ef8568db390cdfe0bbc68f1c7a844f8fd2e94838ec3c5bba28e73) (`aa6c70205c1ef8568db390cdfe0bbc68f1c7a844f8fd2e94838ec3c5bba28e73`). Re-scan after each release; unsigned `SendInput` utilities can still trigger heuristic detections that are not malware.

---

## 📬 Reporting a Vulnerability

If you discover a potential security vulnerability in ClipTyper, please report it privately:

* **Email:** `cliptyper-support.payroll373@passmail.com`
* **Response SLA:** We commit to acknowledging receipt within 48 hours and providing regular remediation updates.
* **Public Disclosure:** Please do not open public GitHub issues for undisclosed vulnerabilities until a fix has been coordinated.