4 ms·

Unfortunately, this simplistic behavior modeling ends up being incompatible with autofill and password managers.

• Bartweiss 8y ago
  My bank's in-app password reset tool clears all fields and requires you to restart if the app is suspended mid-form. It also disables copy + paste into the app fields. And, their identity verification involves texting you a 10-digit security code, which falls just outside of most people's working memory. And I use it often, because their password requirements are incredibly specific - so specific they cripple the search space - and they won't allow password manager pasting. Of course, if I made my password "dragondragondragon1!", they'd happily accept it and I'd never have to use their torturous interface. It's amazing how far security features can go in being both anti-user and anti-security.
  • Merad 8y ago
    In Firefox you can change the setting dom.event.clipboardevents.enabled to false to prevent the absurd past-blocking behavior.