71–80 of 246 posts
Earlier quoted context omitted.
I had to implement this kinda code when I worked for Demand Media and it certainly worked. Whats funny is you don't need any fancy new apis to make it work. We were doing some pretty basic tactics actually. Only real way to prevent it is disable javascript.
You should have refused
Earlier quoted context omitted.
I had to implement this kinda code when I worked for Demand Media and it certainly worked. Whats funny is you don't need any fancy new apis to make it work. We were doing some pretty basic tactics actually. Only real way to prevent it is disable javascript.
What do you mean by it worked? Did you have metrics supporting increased views that were tied to the paste highjacking?
Earlier quoted context omitted.
Note that clever timing could get the "evil text" in your clipboard between checking in a text editor and pasting into the terminal. Hard to time correctly, but not impossible.
If you're taking that step, then after you paste into the clean room, you copy out of the clean room.
Earlier quoted context omitted.
No, but I can verify the hash of the installer before I run it though.
And who provided you with the hash?
But I agree with your greater point; hashes are better used as a guard against file corruption than fuckery.
Earlier quoted context omitted.
Websites can find better solutions if we kill this annoying feature. We have local storage in all browsers. Rather than prompting why not save it and recover when the user comes back. The users will always prefer this. It saves data even when the website crashes or the connectivity is lost and there is some important data on the page. Why have a feature that is abused more often than used especially there is no case…
It's not always that clear. If I leave a page, how is one to know whether that was intentional or not? If it's intentional, you don't want to pull the data back up (people want a "fresh copy") If it's not intentional, you do want to pull the data back up. Though of course you can make something like a "New Copy" button, but then that presents its own challenges.
There are many news sites that make it extremely hard to share their content on sites like HN or reddit because of these tricks. I wonder if they are actually losing traffic from it, or if their tactics work? I'm referring when you copy the text in the title of an article to try to paste it into the Title box on HN or reddit. But what you 'paste' is actually a huge paragraph about how great the news website is and ho…
Earlier quoted context omitted.
I had to implement this kinda code when I worked for Demand Media and it certainly worked. Whats funny is you don't need any fancy new apis to make it work. We were doing some pretty basic tactics actually. Only real way to prevent it is disable javascript.
What do you mean by it worked? Did you have metrics supporting increased views that were tied to the paste highjacking?
Why do browsers not require explicit user permission before allowing a site to perform clipboard manipulations? In a similar tashion to how the HTML5 geo-location API is opt-in?
On a somewhat related note: why do browsers allow websites to prevent you from leaving via those annoying dialog boxes that ask you to click "cancel" or "leave"?