5 ms·

you always have to press that button. btw, can you test on opera?

• StavrosK 14y ago
  You also always have to type in your password. What's the difference?
  • gpvos 14y ago
    No, you don't.
    • StavrosK 14y ago
      I don't know about you, but I can't log in without a password.
      • gpvos 14y ago
        Yes, you enter it once and let Opera remember it. After that, you don't have to type it in anymore, but you can use alt-enter.
        • StavrosK 14y ago
          homakov meant that the vulnerability still exists, and I was saying that it's better in Opera than in any other alternative.
• aw3c2 14y ago
  alt-enter works too
• laumars 14y ago
  It doesn't work in Opera. Basically Opera doesn't auto-complete unless you click a specific button once the page loads. Then Opera will not only auto complete the password form, but submit it as well.
  • hythloday 14y ago
    Isn't there a race condition, where the password is visible to malicious Javascript, before the submit navigates away from the filled-form page?
    • deleted 14y ago
      [deleted]
    • plorkyeran 14y ago
      Yes, and I've actually used that to extract my own password that I've forgotten. Opera's implementation coincidentally stops this specific attack, but it's not in any way a security mechanism.
• anonymfus 14y ago
  I can, and I can ever test race condition, mentioned by hythloday. http://youtu.be/jsfEy32n_xI http://youtu.be/jsfEy32n_xI