8 ms·

> I've actually had one company reach out to me after making it on the list and they made their password rules less dumb. That’s a huge win! My pet peeve is s

> I've actually had one company reach out to me after making it on the list and they made their password rules less dumb. That’s a huge win! My pet peeve is sites that block pasting, say, from a password manager (glaring at you, Costco signup page). Those sites don’t usually include “do not paste” in the listed requirements, so this doesn’t really work with your screenshot approach. Ideas?

pwg 7y ago
> My pet peeve is sites that block pasting Firefox: about:config: dom.event.clipboardevents.enabled, toggle to "false" (default is true). Result: websites can no longer block you from pasting things into form fields on your own browser on your own computer.
- bryanrasmussen 7y ago
  so you can paste with the menu? Because I guess they would just catch the keyboard events?
  - jtbayly 7y ago
    Nope. Don’t think so.
  - boring_twenties 7y ago
    I think they must block catching Ctrl+C/V/X, because those key combos work for me with that flag.
- Sylamore 7y ago
  I used to set this permanently, but discovered if you use facebook making status updates and comments become broken due to how fb seems to scan your input to apply styling. But I often have to toggle it off temporarily to bypass the stupid copy/paste blocks.
  - Ayesh 7y ago
    You can create a bookmarklet to disable paste event listeners.
- coremoff 7y ago
  note for firefox users, that this will break copy/paste in google docs
- CaptainMarvel 7y ago
  There is a Firefox extension called Don’t Fuck With Paste which let’s you toggle this per-website with a button.
  - boring_twenties 7y ago
    In what situation would you want this enabled?
    - CaptainMarvel 7y ago
      When a website is fucking with your ability to copy or paste!
- marcosdumay 7y ago
  Then you'll discover sites that consume your password by Javascript in the onKeyPressed event handler.
- PeterisP 7y ago
  I tried this, but this breaks some web apps where I need clipboardevents to work (e.g. Google Docs). There needs to be a more granular option for this somehow, possibly in a plugin.
klhutchins 7y ago
Just to add. I'm Not sure if it's just a policy thing, but when a windows rdp session locks, pasting the password is blocked. Manually typing the password becomes a pain. I really hope anything that blocks pasting in forms has good reason, an not just psuedo security
- dingo_bat 7y ago
  If you have a Microsoft or Logitech mouse you can map a button to a macro that types your password. It works well with rdp password fields.
  - Reelin 7y ago
    FYI you still appear to be shadow banned.
modeless 7y ago
I'm a big fan of this browser extension "Don't fuck with Paste" https://chrome.google.com/webstore/detail/dont-fuck-with-paste/nkgllhigpcljnhoakjkgaieabnkmgdkb?hl=en https://chrome.google.com/webstore/detail/dont-fuck-with-pas...
elevenbits 7y ago
I've noticed a number of sites now are doing something that interferes with the password manager (Lastpass in this case). Common problems are either that autofill doesn't work (even explicitly clicking autofill does nothing), or they put a button in the username/password field that's exactly where Lastpass puts its button, so it's impossible to click. I don't get it -- don't the sites want users to use more secure passwords? That should mean encourage password managers, unless they imagine I'm gonna remember a 32 character random unique password for every website?
- Sylamore 7y ago
  I contacted my credit union about this and they responded their auditors required it for security compliance reasons. Thankfully after many months they "fixed" it by removing the restrictions... but made the login a multipage ordeal which still breaks my pw manager.
rdiddly 7y ago
Dunno about educating all those idiots, but for mitigating their idiocy I have a two-line AutoHotKey script (this is in Windows) called FakePaste mapped to ctrl-shift-alt-V. All it does is read from the clipboard and pretend to type those characters, one per 100ms if I recall correctly, or maybe I set it to 200ms. AHK can mimic keypresses at the system level, so it defeats whatever silly shit anyone tries to do in the browser. It's as if you were typing. If you're on Windows and willing to install AutoHotKey I can give you the script.
gumby 7y ago
> My pet peeve is sites that block pasting Safari users can install StopTheMadness which disables this and other such nonsense.

pwg 7y ago

> My pet peeve is sites that block pasting Firefox: about:config: dom.event.clipboardevents.enabled, toggle to "false" (default is true). Result: websites can no longer block you from pasting things into form fields on your own browser on your own computer.

bryanrasmussen 7y ago
so you can paste with the menu? Because I guess they would just catch the keyboard events?
- jtbayly 7y ago
  Nope. Don’t think so.
- boring_twenties 7y ago
  I think they must block catching Ctrl+C/V/X, because those key combos work for me with that flag.
Sylamore 7y ago
I used to set this permanently, but discovered if you use facebook making status updates and comments become broken due to how fb seems to scan your input to apply styling. But I often have to toggle it off temporarily to bypass the stupid copy/paste blocks.
- Ayesh 7y ago
  You can create a bookmarklet to disable paste event listeners.
coremoff 7y ago
note for firefox users, that this will break copy/paste in google docs
CaptainMarvel 7y ago
There is a Firefox extension called Don’t Fuck With Paste which let’s you toggle this per-website with a button.
- boring_twenties 7y ago
  In what situation would you want this enabled?
  - CaptainMarvel 7y ago
    When a website is fucking with your ability to copy or paste!
marcosdumay 7y ago
Then you'll discover sites that consume your password by Javascript in the onKeyPressed event handler.
PeterisP 7y ago
I tried this, but this breaks some web apps where I need clipboardevents to work (e.g. Google Docs). There needs to be a more granular option for this somehow, possibly in a plugin.

klhutchins 7y ago

Just to add. I'm Not sure if it's just a policy thing, but when a windows rdp session locks, pasting the password is blocked. Manually typing the password becomes a pain. I really hope anything that blocks pasting in forms has good reason, an not just psuedo security

dingo_bat 7y ago
If you have a Microsoft or Logitech mouse you can map a button to a macro that types your password. It works well with rdp password fields.
- Reelin 7y ago
  FYI you still appear to be shadow banned.

modeless 7y ago

I'm a big fan of this browser extension "Don't fuck with Paste" https://chrome.google.com/webstore/detail/dont-fuck-with-paste/nkgllhigpcljnhoakjkgaieabnkmgdkb?hl=en https://chrome.google.com/webstore/detail/dont-fuck-with-pas...

elevenbits 7y ago

I've noticed a number of sites now are doing something that interferes with the password manager (Lastpass in this case). Common problems are either that autofill doesn't work (even explicitly clicking autofill does nothing), or they put a button in the username/password field that's exactly where Lastpass puts its button, so it's impossible to click. I don't get it -- don't the sites want users to use more secure passwords? That should mean encourage password managers, unless they imagine I'm gonna remember a 32 character random unique password for every website?

Sylamore 7y ago
I contacted my credit union about this and they responded their auditors required it for security compliance reasons. Thankfully after many months they "fixed" it by removing the restrictions... but made the login a multipage ordeal which still breaks my pw manager.

rdiddly 7y ago

Dunno about educating all those idiots, but for mitigating their idiocy I have a two-line AutoHotKey script (this is in Windows) called FakePaste mapped to ctrl-shift-alt-V. All it does is read from the clipboard and pretend to type those characters, one per 100ms if I recall correctly, or maybe I set it to 200ms. AHK can mimic keypresses at the system level, so it defeats whatever silly shit anyone tries to do in the browser. It's as if you were typing. If you're on Windows and willing to install AutoHotKey I can give you the script.

gumby 7y ago

> My pet peeve is sites that block pasting Safari users can install StopTheMadness which disables this and other such nonsense.