If you disable pasting in your password field, I hate you.
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted there's a special place in hell, right after people that don't let you type out a date but force a date picker at you
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted
The underlaying issue here is that modern OSes generate a paste event instead of simulating a typing keycodes event which would prevent any shennigans like this to work in the first place -
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted so annoying... on desktops i have a system-wide keyboard shortcut which triggers "type the clipboard contents", as a workaround.
-
@brainblasted so annoying... on desktops i have a system-wide keyboard shortcut which triggers "type the clipboard contents", as a workaround.
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted I use a simple paper boolet with A, B, C, .... and pretty complex passwords with subtitution parts, some more than 20 character long. The substitution parts are not known in the booklet, only in my mind. I never trust password managers.
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
Oh yes, that's so bad.
I have an app here on the phone that does not allow pasting. I've been silently ranting and raging about it. Internalisation is a thing. -
@CppGuy @brainblasted Linux: Espanso
Previously, macOS: Keyboard Maestro
Getting Started | Espanso
In this section, we will cover the basics of Espanso to quickly get you started.
(espanso.org)
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
Password show buttons should be de-rigour and obvious. Everyone is not entering passwords with someone looking over their shoulder, I would suggest most people are not,
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted I lived that particular moment so many times
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted Do you know what a bookmarklet is? It's a tiny javascript that you can add to your bookmarks at the top of the page. Instead of having an URL in the target, you add this script.
If you click on the link, it will find all password fields on the page and turn it into a regular input field to make the content visible. It is harmless and has no impact on the workings of the page```
javascript:(function(){
document.querySelectorAll('input[type="password"]').forEach(el => el.type = 'text');})()
``` -
@brainblasted Do you know what a bookmarklet is? It's a tiny javascript that you can add to your bookmarks at the top of the page. Instead of having an URL in the target, you add this script.
If you click on the link, it will find all password fields on the page and turn it into a regular input field to make the content visible. It is harmless and has no impact on the workings of the page```
javascript:(function(){
document.querySelectorAll('input[type="password"]').forEach(el => el.type = 'text');})()
```@haayman til! Thanks for the tip
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted this is all true, but my least favorite is "I'm only gonna give you three tries then lock you out". (Nobody can brute force a password in three tries, so what problem is that solving?)
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted My previous bank has not only disabled "paste" in their iOS banking app login - they even implemented their *OWN ON-SCREEN KEYBOARD* for passwort entry.. (and that one was hardcoded to German qwertz layout ..)
-
@brainblasted My previous bank has not only disabled "paste" in their iOS banking app login - they even implemented their *OWN ON-SCREEN KEYBOARD* for passwort entry.. (and that one was hardcoded to German qwertz layout ..)
@Larvitz @brainblasted For ultimate security, they should invent some special characters that are only found on their custom keyboard, and then require you to use them in your password.
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted
My password manager has an autotype function, rather than pasting the password, it sends the username and password as keystrokes. -
@brainblasted
My password manager has an autotype function, rather than pasting the password, it sends the username and password as keystrokes.@leeloo @brainblasted What password manager is that?
-
@leeloo @brainblasted What password manager is that?
-
@CheapPontoon @brainblasted if you can find the password input field in the developer console, you can manipulate it directly
- Ctrl+Shift+i to open the developer console in most browsers. If the website tries to stop you, you can do it in the address bar so it doesn't have a chance to intercept.
- Go to the first tab (the one that has a bunch of lines of text starting with
<) and find the password input. There's a button in every browser's developer tools to pick an element using your mouse, which can help on pages with complicated markup. - If there's not a text box at the bottom of the developer tools, hit the ESC key once to bring it up.
- With the
<input type="password"element still selected, type$0.valuein the text box and press enter to see what password is in the box. - You can also type
$0.value = prompt()to get a text box controlled by your browser that you can paste the password into
@ben @CheapPontoon @brainblasted I may have an easier solution:
https://todon.nl/@haayman/116070020654615607 -
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted Hi Chris. If you use Firefox, one of these add-ons might help:
Paste Enabler – Get this Extension for 🦊 Firefox (en-US)
Download Paste Enabler for Firefox. Addon that allows to paste into a web page, even if it is blocked. When you are on a web page that prohibits it, click on the extension icon. It will force the possibility of pasting.
(addons.mozilla.org)
Force Paster – Get this Extension for 🦊 Firefox (en-US)
Download Force Paster for Firefox. This extension pastes your text even where pasting is disabled.
(addons.mozilla.org)
Don't Fuck With Paste – Get this Extension for 🦊 Firefox (en-US)
Download Don't Fuck With Paste for Firefox. This add-on stops websites from blocking copy and paste for password fields and other input fields.
(addons.mozilla.org)
-
If you disable pasting in your password field, I hate you. I hate you even more if you don't have a "show password" button so I can verify that I'm typing my password correctly since you won't let me paste
@brainblasted it’s right up there with asking for my email on one page then the password on the next bonus fail points if you make me a click a send 2FA email button instead of just doing it Automatically.
