3 ms·
Some of these policies (like not allowing paste into change-password fields) I can understand conceptually; for example, you don't want someone to mistype their
by danudey 12y ago
Some of these policies (like not allowing paste into change-password fields) I can understand conceptually; for example, you don't want someone to mistype their password, paste it twice, and then not be able to get in again later. This example works around problems that most people have, and really screws over people who use secure passwords and password managers.
It's that old pattern of trying to be 'clever' to work around a problem, which in turn screws over anyone who doesn't actually have that problem, akin to plugging a sideways AC adapter[1] into a horizontal power strip[2]. The sideways AC adapter is a suitable workaround if you don't have a sideways power strip, but if you do it's often much worse (especially if you have two to plug in).
Perhaps LastPass et al should provide a browser extension to prevent this kind of behaviour in the first place (e.g. removing onpaste events from password fields).
[1] http://i.imgur.com/zMSX7K2.jpg http://i.imgur.com/zMSX7K2.jpg
[2] http://i.imgur.com/AFfgq9a.jpg http://i.imgur.com/AFfgq9a.jpg
- npsimons 12y agofor example, you don't want someone to mistype their password, paste it twice And right there, you've made the wrong assumption that so many have in this thread; the whole point of password managers is that you're not typing anything in, ever. You generate the password, preferably in your password manager, then paste it twice. No possibility of typos.