4 ms·

We have disabled CTRL+C, CTRL+V on our site, just due to this, so users really need to validate there email. EDIT: Just to clarify since someone took up a exam

by iriche 13y ago

We have disabled CTRL+C, CTRL+V on our site, just due to this, so users really need to validate there email. EDIT: Just to clarify since someone took up a example with no paste on password. We just have this function on the email-field.

pornel 13y ago
I hate you. It's a lazy naive "solution" that makes my life harder for no good reason. Take effort to implement good validation and recovery: 1. Use client-side validation (HTML5 field ideally) and look up the domain part. Offer "did you mean" suggestion for typos of very popular domains. 2. As long as user is signed in allow them to change e-mail post registration (e.g. "We've sent e-mail to xxtypo@geemail.com and haven't received confirmation. [Change e-mail address]")
MikeTaylor 13y ago
That is certainly ONE way of making me hate your site (and never use it if I can avoid it). Arguably even worse is TalkTalk's login form, which disables pasting into the password field. So I can't just copy my password there from a locket, I have to retype it. As a result I have chosen a stupidly easy-to-break password, just so I have a chance of typing it correctly, unlike the "gr2@tGig^monE"-stype passwords I otherwise use.
- MikeTaylor 13y ago
  And yes, I know, Correct Horse Battery Staple. That's all very well until you have to register on a web-site that restricts passwords to 8-12 characters.
  - mcv 13y ago
    A surprising number of websites explicitly require easy passwords (though they call it something different). If you want a mix of uppercase, lowercase and numbers, with a length of 8-12, you're going to get Welcome01.
sdfjkl 13y ago
A pox upon you. I have Greasemonkey scripts for this kind of annoyance, as well as the autocomplete=off bullshit that prevents my perfectly safe password manager from improving security by not having to go through the clipboard. Despite my workarounds, every time I see this kind of misbehaviour, I hate you, your website and your company a little more.
- iriche 13y ago
  Did I say I did it on password field or at login? EDIT: Edited my main commented due to a comment regarding password fields blocking CTRL+V
csmattryder 13y ago
More than once I have completely lost interest in a product/service firmly on the base of these kinds of 'fixes'. It seems like if I'm restricted by this right now (hell, I type my email in roughly 6-7 times a day, with 100% success!) what level of 'fixes' will I experience when I am inside?
huxley 13y ago
I hope at the very least that you're at least doing it for the specific email fields rather than messing with password copy-and-paste. Here's a discussion of disabling paste on passwords and usernames: http://stackoverflow.com/questions/4760132/improving-login-security-through-denial-of-copy-paste http://stackoverflow.com/questions/4760132/improving-login-s...
- iriche 13y ago
  Yes, just the e-mail field, to do it on password field is just annoyance.
kiallmacinnes 13y ago
This is awful - Almost as bad as breaking the "back button".
techsupporter 13y ago
So glad this pref exists in Firefox, for just this reason: https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/dom.event.clipboardevents.enabled https://developer.mozilla.org/en-US/docs/Mozilla/Preferences...
- sdfjkl 13y ago
  Thanks, useful. I'm sure it'll break copy/paste in Google Docs, but that's a small price to way.
ta_delited 13y ago
You should die a slow and painful agony in a fire while eaten by rats on steroids or something even worse if available. When I encounter this stupidity and I really want to register, I will first try again with scripts disabled, if your form is broken and requires scripts to work and I still want to register despite the insanity I will use other ways of copy-pasting (middle click, re-assigning shortcut, editing the form). But usually when a registration form gives me a big "fuck you" by misusing scripts to disable basic computing features, I move away because I'm older and wiser now, when I was young and stupid I would find a way to rack the hosting bill of the moron who designed this stupid stupidity.

by iriche 13y ago

pornel 13y ago

I hate you. It's a lazy naive "solution" that makes my life harder for no good reason. Take effort to implement good validation and recovery: 1. Use client-side validation (HTML5 field ideally) and look up the domain part. Offer "did you mean" suggestion for typos of very popular domains. 2. As long as user is signed in allow them to change e-mail post registration (e.g. "We've sent e-mail to xxtypo@geemail.com and haven't received confirmation. [Change e-mail address]")

MikeTaylor 13y ago

That is certainly ONE way of making me hate your site (and never use it if I can avoid it). Arguably even worse is TalkTalk's login form, which disables pasting into the password field. So I can't just copy my password there from a locket, I have to retype it. As a result I have chosen a stupidly easy-to-break password, just so I have a chance of typing it correctly, unlike the "gr2@tGig^monE"-stype passwords I otherwise use.

MikeTaylor 13y ago
And yes, I know, Correct Horse Battery Staple. That's all very well until you have to register on a web-site that restricts passwords to 8-12 characters.
- mcv 13y ago
  A surprising number of websites explicitly require easy passwords (though they call it something different). If you want a mix of uppercase, lowercase and numbers, with a length of 8-12, you're going to get Welcome01.

sdfjkl 13y ago

A pox upon you. I have Greasemonkey scripts for this kind of annoyance, as well as the autocomplete=off bullshit that prevents my perfectly safe password manager from improving security by not having to go through the clipboard. Despite my workarounds, every time I see this kind of misbehaviour, I hate you, your website and your company a little more.

iriche 13y ago
Did I say I did it on password field or at login? EDIT: Edited my main commented due to a comment regarding password fields blocking CTRL+V

csmattryder 13y ago

More than once I have completely lost interest in a product/service firmly on the base of these kinds of 'fixes'. It seems like if I'm restricted by this right now (hell, I type my email in roughly 6-7 times a day, with 100% success!) what level of 'fixes' will I experience when I am inside?

huxley 13y ago

I hope at the very least that you're at least doing it for the specific email fields rather than messing with password copy-and-paste. Here's a discussion of disabling paste on passwords and usernames: http://stackoverflow.com/questions/4760132/improving-login-security-through-denial-of-copy-paste http://stackoverflow.com/questions/4760132/improving-login-s...

iriche 13y ago
Yes, just the e-mail field, to do it on password field is just annoyance.

kiallmacinnes 13y ago

This is awful - Almost as bad as breaking the "back button".

techsupporter 13y ago

So glad this pref exists in Firefox, for just this reason: https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/dom.event.clipboardevents.enabled https://developer.mozilla.org/en-US/docs/Mozilla/Preferences...

sdfjkl 13y ago
Thanks, useful. I'm sure it'll break copy/paste in Google Docs, but that's a small price to way.

ta_delited 13y ago

You should die a slow and painful agony in a fire while eaten by rats on steroids or something even worse if available. When I encounter this stupidity and I really want to register, I will first try again with scripts disabled, if your form is broken and requires scripts to work and I still want to register despite the insanity I will use other ways of copy-pasting (middle click, re-assigning shortcut, editing the form). But usually when a registration form gives me a big "fuck you" by misusing scripts to disable basic computing features, I move away because I'm older and wiser now, when I was young and stupid I would find a way to rack the hosting bill of the moron who designed this stupid stupidity.