3 ms·

Someone made an Chrome extension to enable password pasting again. Don't Fuck With Paste: https://chrome.google.com/webstore/detail/dont-fuck-with-paste/nkgllh

Someone made an Chrome extension to enable password pasting again. Don't Fuck With Paste: https://chrome.google.com/webstore/detail/dont-fuck-with-paste/nkgllhigpcljnhoakjkgaieabnkmgdkb?utm_source=chrome-app-launcher-info-dialog https://chrome.google.com/webstore/detail/dont-fuck-with-pas...

Aaronn 9y ago
Also available on Firefox: https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-with-paste/?src=userprofile https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-wi...
gruez 9y ago
For Firefox users: https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/dom.event.clipboardevents.enabled https://developer.mozilla.org/en-US/docs/Mozilla/Preferences...
tracker1 9y ago
Thanks... :-) I hate that... I mean, pwd managers and paste are more secure than having to type them in.. not to mention, less prone to mistakes.
bigiain 9y ago
And now we've moved the problem from "I used a weak password for $site because I couldn't paste it from my password manager" to "I've got an extension in my browser from some internet random that manipulates every form field including the password field on every webpage I visit"... (And yeah, the "internet random" here has a github repo with the code, and the file that does this is an easily auditable 16 lines of javascript, so props to him for that. But it's still got the recently exploited attack vector that he or an attacker who takes over his account could push malicious updates to the extension, like the webdev extension from earlier this week...)
joshschreuder 9y ago
I've used this extension before, just a note that it will break legitimate onpaste events, for example websites that let you paste an image in, like Imgur or Twitter https://github.com/jswanner/DontFuckWithPaste/issues/14 https://github.com/jswanner/DontFuckWithPaste/issues/14

Aaronn 9y ago

Also available on Firefox: https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-with-paste/?src=userprofile https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-wi...

gruez 9y ago

For Firefox users: https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/dom.event.clipboardevents.enabled https://developer.mozilla.org/en-US/docs/Mozilla/Preferences...

tracker1 9y ago

Thanks... :-) I hate that... I mean, pwd managers and paste are more secure than having to type them in.. not to mention, less prone to mistakes.

bigiain 9y ago

And now we've moved the problem from "I used a weak password for $site because I couldn't paste it from my password manager" to "I've got an extension in my browser from some internet random that manipulates every form field including the password field on every webpage I visit"... (And yeah, the "internet random" here has a github repo with the code, and the file that does this is an easily auditable 16 lines of javascript, so props to him for that. But it's still got the recently exploited attack vector that he or an attacker who takes over his account could push malicious updates to the extension, like the webdev extension from earlier this week...)

joshschreuder 9y ago

I've used this extension before, just a note that it will break legitimate onpaste events, for example websites that let you paste an image in, like Imgur or Twitter https://github.com/jswanner/DontFuckWithPaste/issues/14 https://github.com/jswanner/DontFuckWithPaste/issues/14