5 ms·

For a while, the login for TreasuryDirect (the gov site for buying US bonds) disabled paste and typing! It required you to click out your password on an onscree

by yojo 2y ago

For a while, the login for TreasuryDirect (the gov site for buying US bonds) disabled paste and typing! It required you to click out your password on an onscreen keyboard. I pity the folks who don’t know how to use dev tools.

commandersaki 2y ago
Good on 'em for doing a complete 180 on that. Bank of Melbourne has stated that using a Password Manager is a violation of their Terms of Service (as people have complained about the non-pasteable/autofill fields).
- magnetowasright 2y ago
  Last time I had the sincere displeasure of having to use bank of Melbourne, their password rules included that you couldn't have repeated letters, so if you were trying to use a passphrase like correct-horse-battery-staple it would not allow the double r in correct or double t in battery. The rest of their password rules were abhorrent like all financial institutions but that one in particular irritated me to no end.
nytesky 2y ago
You buried the lead there: A required on-screen keyboard with RANDOM GENERATED LAYOUT.
- jakub_g 2y ago
  For whomever is interested, IIRC, this requirement of random layout came up in late 2000/early 2010 due to: - keyloggers (safer to click instead of type instead -> on-screen keyboard then) - but then it turned out Internet Explorer had a bug which allowed attackers to read the mouse click events' X/Y coordinates in other windows which then could be mapped to the on-screen keyboard digits if the layout is predictable
- brokenmachine 2y ago
  ING Bank Australia still does that. And it also makes my laptop's fan spin up for about 5 seconds on the page load or reload. No idea WTF they're doing - cryptomining? https://www.ing.com.au/securebanking/ https://www.ing.com.au/securebanking/ My password manager appears to type the access code successfully but you can't click on login until you click on the stupid keypad.

by yojo 2y ago

commandersaki 2y ago

Good on 'em for doing a complete 180 on that. Bank of Melbourne has stated that using a Password Manager is a violation of their Terms of Service (as people have complained about the non-pasteable/autofill fields).

magnetowasright 2y ago
Last time I had the sincere displeasure of having to use bank of Melbourne, their password rules included that you couldn't have repeated letters, so if you were trying to use a passphrase like correct-horse-battery-staple it would not allow the double r in correct or double t in battery. The rest of their password rules were abhorrent like all financial institutions but that one in particular irritated me to no end.

nytesky 2y ago

You buried the lead there: A required on-screen keyboard with RANDOM GENERATED LAYOUT.

jakub_g 2y ago
For whomever is interested, IIRC, this requirement of random layout came up in late 2000/early 2010 due to: - keyloggers (safer to click instead of type instead -> on-screen keyboard then) - but then it turned out Internet Explorer had a bug which allowed attackers to read the mouse click events' X/Y coordinates in other windows which then could be mapped to the on-screen keyboard digits if the layout is predictable
brokenmachine 2y ago
ING Bank Australia still does that. And it also makes my laptop's fan spin up for about 5 seconds on the page load or reload. No idea WTF they're doing - cryptomining? https://www.ing.com.au/securebanking/ https://www.ing.com.au/securebanking/ My password manager appears to type the access code successfully but you can't click on login until you click on the stupid keypad.