4 ms·
Except an error will lead to your password being typed in plaintext potentially if the timeout expires and the focus goes back to the login field or another fie
by robk 7y ago
Except an error will lead to your password being typed in plaintext potentially if the timeout expires and the focus goes back to the login field or another field or url bar
- greggyb 7y agoWhat is the threat model here? How am I compromised if part of my password gets typed somewhere else? It's already plaintext when it's typed. If there's a keylogger on my machine, they're getting the password. If it's typed into another field, I'm really not concerned. I'm not logged in yet. So if it gets typed somewhere and submitted through a form, it may end up in a log somewhere un-associated with my username. If the concern is that it's seen in public, this is valid, I guess, but not a concern for me. I access private services in private. Probably 90% of my computing is done in my home.