Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't fuck with paste

github.com

Post reply on HN
Print view View original

131–140 of 397 posts

Re: Don't fuck with paste

#131

Post by paradox460 »

Andrex wrote: post #124
lesuorac wrote: post #70

Earlier quoted context omitted.

The browser's control-f won't find you text draw onto a canvas element so those users really aren't wrong ...

It's also trivial to use Ctrl+F on such pages if you so choose by clicking into the URL bar and then doing the keyboard combo. (Or just make two clicks in the browser menu.) I can see valid use cases for customizing Ctrl+F.

Discourse apps bind the first hit of Ctrl/cmd-f to the app's search feature, and then the second passes through and hits the browsers. Seems to be the right way to do it

Re: Don't fuck with paste

#132

Post by lolinder »

eviks wrote: post #113
lolinder wrote: post #55

For something simple like this that doesn't really need to be on all the time I've started leaning back towards bookmarklets over extensions. The code is usually simple enough to actually audit, it only runs when you click the bookmarklet, and it doesn't update underneath you without warning. A few months back someone shared several bookmarklets that they use, one of which was a simple one that disables all clipboard…

But then you need to click Also you can get the extension loaded locally, and it will never update

I run into one of these broken-clipboard situations once every few months, I can afford to spend an extra click in order to not have an extension active on every website I ever visit.

Re: Don't fuck with paste

#133

Post by Nifty3929 »

jessriedel wrote: post #12

> In order to provide the smoothest experience as possible, the extension needs to know when you change active tabs. In order for the extension to know about that event, it needs the tabs permission, which Chrome describes as "can read and change all your data on websites you visit." That description is very scary, and is certainly not what this extension is doing. Being an open-sourced project, you can always read a…

This is a bit cynical isn't it, when the author is clearly being as transparent as possible about what they need and why, which is due to factors outside their control.

Of course you're right in a technical sense. They could do whatever they want later.

But still let's celebrate and attitude like this rather than criticizing it.

Re: Don't fuck with paste

#134

Post by panja »

freediver wrote: post #36

This was one of those things that frustrated me so much that we ended building this natively into Orion browser (Tools menu -> Allow Copy & Paste). [1] One of the joys of building your own browser. [1] https://kagi.com/orion

Sadly, I am not in that ecosystem :(

Re: Don't fuck with paste

#135

Post by Nifty3929 »

S201 wrote: post #99
dkjaudyeqooe wrote: post #52

To work around this I usually drag and drop text pasted into the URL field or somewhere, on my Mac at least. Can I just say though that disabling paste, apparently in the name of security, is the dumbest shit I have ever encountered, right in front of ultra short timeouts everywhere. If only I could meet the people who make these decisions in person...

> right in front of ultra short timeouts everywhere > If only I could meet the people who make these decisions in person... For what it's worth, I was once forced to implement a half hour auto-logout on a website that could hardly be considered as containing sensitive data because an external pentest firm flagged the lack of a short timeout as an issue. The only way we could show clients a passing pentest was to comp…

"management gave us no choice" - Would you have done differently?

"The only way we could show clients a passing pentest..."

Re: Don't fuck with paste

#137

Post by dotancohen »

Nifty3929 wrote: post #133
jessriedel wrote: post #12

> In order to provide the smoothest experience as possible, the extension needs to know when you change active tabs. In order for the extension to know about that event, it needs the tabs permission, which Chrome describes as "can read and change all your data on websites you visit." That description is very scary, and is certainly not what this extension is doing. Being an open-sourced project, you can always read a…

This is a bit cynical isn't it, when the author is clearly being as transparent as possible about what they need and why, which is due to factors outside their control. Of course you're right in a technical sense. They could do whatever they want later. But still let's celebrate and attitude like this rather than criticizing it.

Sounds to me like GP is complaining about Chrome's permission model, not this particular extension.

Re: Don't fuck with paste

#138

Post by lukan »

varenc wrote: post #128
quickslowdown wrote: post #74

Earlier quoted context omitted.

That's terrible for security, but great for convenience :)

Can you explain what you mean by this more?

Probably because "no automatic updates means bad"? Which might be true in general, but maybe not here. Depends how complex the source is.

Re: Don't fuck with paste

#140

Post by [deleted] »

jessriedel wrote: post #129
Vorh wrote: post #126

Earlier quoted context omitted.

I just read through the 65LOC source, and it's because it swaps out an active or inactive extension icon based on your active tab. https://github.com/aaronraimist/DontFuckWithPaste/blob/8cb68...

Huh. That seems not super important to me. Presumably he could make a option/version where the icon didn't change?

[deleted]
Post reply on HN