Substack's UI and 1Password temporarily cost me $2k

#1

Post by tomahony » Tue, Mar 23, 2021, 12:16 AM UTC

Substack's UI and 1Password temporarily cost me $2k
timmyomahony.com

Re: Substack's UI and 1Password temporarily cost me $2k

#2

Post by tedyoung » Tue, Mar 23, 2021, 12:43 AM UTC

I wish sites would test their forms with popular password management systems. This kind of thing happens all too often (thought perhaps not with such a high cost). Why not make it easy for people who auto-fill with these programs -- don't fight them.

(And I won't get into sites that won't let you paste passwords into their forms.)

Re: Substack's UI and 1Password temporarily cost me $2k

#3

Post by petulla » Tue, Mar 23, 2021, 12:54 AM UTC

Seems more accurate to say that 1Password not Substack did this? Also headline is not true?

Re: Substack's UI and 1Password temporarily cost me $2k

#4

Post by jojobas » Tue, Mar 23, 2021, 12:58 AM UTC

I'd say it's more like 1Password cost you $2,023.

Re: Substack's UI and 1Password temporarily cost me $2k

#5

Post by CGamesPlay » Tue, Mar 23, 2021, 12:59 AM UTC

petulla wrote: post #3

Seems more accurate to say that 1Password not Substack did this? Also headline is not true?

Yeah it seems pretty clear that this was a 1Password flaw and didn't really have anything to do with Substack's UI. And yes, the first paragraph notes that no money was spent, so not really sure why multiple people have downvoted your comment.

Re: Substack's UI and 1Password temporarily cost me $2k

#6

Post by s3cur3 » Tue, Mar 23, 2021, 12:59 AM UTC

tedyoung wrote: post #2

I wish sites would test their forms with popular password management systems. This kind of thing happens all too often (thought perhaps not with such a high cost). Why not make it easy for people who auto-fill with these programs -- don't fight them. (And I won't get into sites that won't let you paste passwords into their forms.)

This. If your form is broken with autofill, your form is broken.

Re: Substack's UI and 1Password temporarily cost me $2k

#7

Post by merb » Tue, Mar 23, 2021, 1:00 AM UTC

CGamesPlay wrote: post #5

petulla wrote: post #3

Seems more accurate to say that 1Password not Substack did this? Also headline is not true?

Yeah it seems pretty clear that this was a 1Password flaw and didn't really have anything to do with Substack's UI. And yes, the first paragraph notes that no money was spent, so not really sure why multiple people have downvoted your comment.

because it would've probably failed with other password managers and probably browers (if there are people who save their card details to a browser)

and it would probably also fail with tab.

Re: Substack's UI and 1Password temporarily cost me $2k

#8

Post by oceliker » Tue, Mar 23, 2021, 1:01 AM UTC

My guess is that 1password filled it with the year because it saw the “/year” part of that input box…

Re: Substack's UI and 1Password temporarily cost me $2k

#9

Post by readflaggedcomm » Tue, Mar 23, 2021, 1:02 AM UTC

This is exactly why I don't trust autofill. How many times has it passed along information you didn't intend, but without any obvious errors? Nobody knows.

Re: Substack's UI and 1Password temporarily cost me $2k

#10

Post by MattGaiser » Tue, Mar 23, 2021, 1:02 AM UTC

tedyoung wrote: post #2

I wish sites would test their forms with popular password management systems. This kind of thing happens all too often (thought perhaps not with such a high cost). Why not make it easy for people who auto-fill with these programs -- don't fight them. (And I won't get into sites that won't let you paste passwords into their forms.)

The testing burden is already enormous for things people want sites tested for.