Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The war against autocomplete=off (2013)

blog.0xbadc0de.be

Post reply on HN
Print view View original

41–50 of 78 posts

Re: The war against autocomplete=off (2013)

#41

Post by aris_ada »

penguindev wrote: post #17

> Please note that if you combine this policy and at the same time disable copy and paste into the password fields (I look at you, Blizzard!), I hate you. oh man. disabling paste is the worst, because it breaks keypassx. (Apple did this last I checked!) turbotax did that as well last year, this year they made it sane again. Luckily there's a firefox about:config setting you can do to not let websites hijack / block y…

Seriously, blocking copy & paste, what are they thinking they protect from ?

(blogpost writer here)

Re: The war against autocomplete=off (2013)

#42

Post by doughj3 »

wglb wrote: post #6

The issue may be moot--IE 11 ignores autocomplete=off. And in any case, for the cases where this setting is effective, it doesn't break password managers--just set your password manager to not fill the fields, but use copy and paste for the password. [Edit - spelling]

Does that mean it stores values for fields uses with credit cards, for example? Because that doesn't seem like a great idea.

Re: The war against autocomplete=off (2013)

#43

Post by aris_ada »

joshuahedlund wrote: post #28

> Tell me how I am supposed to fulfill these requirements if I need 20 websites daily to do my work ? One solution to this problem (or at least one way to severely mitigate it) is to use a base word that you tweak with a simple algorithm based on the first letter, last letter, number of letters in the domain, etc. Of course some websites have mutually exclusive requirements, so this doesn't work for all sites, but I'…

Sorry, I don't have time to do so much work just to log on quickly on my email the morning or when relogging for the 25th time in the ticket manager at work, that has too short sessions. Also, enjoy explaining your method to a lambda user, I'd bring popcorn and watch :)

Re: The war against autocomplete=off (2013)

#44

Post by aris_ada »

freehunter wrote: post #5

I don't think I've run into a situation where LastPass has been unable to auto-fill a form. Is this a feature of LastPass, or have I just not gone to sites that disallow autocomplete?

I did not test LastPass and 1Password, only FF sync & Keepass. And it was a while ago.

Re: The war against autocomplete=off (2013)

#45

Post by lugg »

yonran wrote: post #36
brianpgordon wrote: post #33

I just use this bookmarklet to remove "autocomplete=off" from form elements: javascript:(function(){var%20c=0;function%20R(w){try{var%20a,df,dfe,i,j,x,y,r=1;df=w.document.forms;for(i=0;x=df[i];++i){dfe=x.elements;if(a=x.onsubmit){a=""}if(a=x.attributes["autocomplete"]){if(a.value=="on"){c++}a.value="on"}for(j=0;y=dfe[j];++j){if(a=y.attributes["autocomplete"]){if(a.value=="on"){c++}a.value="on"}}}}catch(E){r=0}return%…

There’s also the Chrome extension autocomplete=on from a Chromium author: https://chrome.google.com/webstore/detail/autocomplete-on/ec...

Also use this. Much love for the author.

Re: The war against autocomplete=off (2013)

#47

Post by rip747 »

wyager wrote: post #3

I've run into the problem of web services not letting me store passwords. The reality is, if you let my password manager (safari jacks into OS X's keychain system) keep track of things, I'm going to use the random 12-digit alphanumeric password my password manager provides me. If you don't, I'm either going to use my shitty "brain" password or put it in my password manager anyway and just copy-paste it manually. Than…

http://xkcd.com/936

Re: The war against autocomplete=off (2013)

#48

Post by talklittle »

On Firefox:

1. Go to about:config

2. Right-click anywhere, New -> Boolean:

signon.overrideAutocomplete

Value: true

More info: https://bugzilla.mozilla.org/show_bug.cgi?id=425145

EDIT: Based on the milestone set on that issue, this setting requires Firefox 29. Another workaround is this bookmarklet: https://www.squarefree.com/bookmarklets/forms.html#remember_... referenced from comment https://bugzilla.mozilla.org/show_bug.cgi?id=425145#c16

Re: The war against autocomplete=off (2013)

#49

Post by stcredzero »

My biggest problem is with sites that don't let me copy/paste into the password field. WTF!? Who's the PHB that came up with this policy? Despite this misguided nannying, I still use randomly generated 22 character alphanumeric passwords, even if I have to open up the window in Keepass and manually type them in. Most people aren't as paranoid and anal as me, however. Whoever you are, you're basically encouraging people to use weak passwords.

Ironic, as it seems to be banks that are most often guilty of this.

Re: The war against autocomplete=off (2013)

#50

Post by kybernetyk »

The first thing I install in a new browser is an adblocker. The second thing an addon that disables autocomplete=off.

Yes I'm lazy. But my laptop is encrypted and goes back to the login screen after 2 minutes of inactivity. To me autocomplete=off is just annoying and doesn't add any security.

Post reply on HN