Live data from Hacker News

Safari tries to fill username

github.com

181–190 of 393 posts

Re: Safari tries to fill username

#181
post #3

Earlier quoted context omitted.

Looks more and more like Safari is the "modern" IE

As a webdev I can confirm that I have exactly the same experience supporting Safari that I had supporting IE 15 years ago.

As a non-user of Chrome, I have the same experience browsing on Chrome only/optimized websites that I had when browsing IE only/optimized websites 15 years ago.

Re: Safari tries to fill username

#182
post #62

Earlier quoted context omitted.

Oh man, enterprise "security" firms used by banks and other old behemoths are a cancer for users. If you want your website to actively abuse users (especially one with special needs and pretty much anyone that doesn't fit into an "made up average person mold") get those people on board and listen to the dumb things they say. I still can't believe that whole business managed to interpret 2FA for whole EU as "you MUST…

The product I work on now logs users out after 15 minutes. It's a service where the average user would probably spend a good few hours of their day. We're actively harming the user experience (and driving paying customers away) because of some "expert" advice.

The problem with the security industry is that there's no way for non-experts to reliably assess "I'm an expert, trust me!" from a practitioner.

I'm not really sure what the best fix is; there are many possible ones. I've seen total clowns pushing decades-old nonsense be taken seriously by competent businesses simply because they thought "hiring an expert" was enough, like they're a plumber or something.

Re: Safari tries to fill username

#183

Just another day in web development with Safari, I'm not even surprised anymore. I've encountered so many of those "total nonsense" moments.

Such as?

A high percentage of SPAs are broken in Safari when using the back button, as it tries to fake "speed" by giving you the page exactly as it was in cache, and not fire it up from scratch with an updated context.

Re: Safari tries to fill username

#184
post #76

Earlier quoted context omitted.

Autocomplete has one huge, glaring disadvantage: the passwords are stored on your computer, in reversible form.

Yes, but let's be fair, it's a galaxy better than writing it on a post-it or password booklet, and still way better than using a memorable passphrase which will get reused and then leaked. Besides, you can encrypt the local storage with a master password (and if you accept online as a requirement, you could even add 2FA to that).

>but let's be fair, it's a galaxy better than writing it on a post-it or password booklet

Is it? If someone is physically in your home you are in greater trouble anyways and even then they likely aren't going to be grabbing a notebook. Just keep it somewhere nearby but hidden (notebook in a drawer on the desk).

Re: Safari tries to fill username

#185

Why would someone even use Safari instead of Chrome? Hell I would rather use Edge.

I recommend avoiding all chromium-based browsers in favor of either Firefox or Safari. Don't support a monoculture of browser engines. The more variety in browsers, the more power the end user has.

Re: Safari tries to fill username

#186

Earlier quoted context omitted.

1. Privacy 2. Battery 3. Performance

Your no. 1 reason is being questioned by the article, though.

Offering autofill (it's not actually automatically filling in) doesn't really violate privacy, does it? And if you don't want your browser to autofill passwords at all, then don't keep any passwords in its password store.

Re: Safari tries to fill username

#187
post #97

Earlier quoted context omitted.

The issue was that it was ONLY SMS - they immediately deprecated private certificates, 2FA "calculators" and other 2FA schemes. After the security backlash they now backpedaled and implemented 2FA with ONLY apps. Apps that ONLY work on iOS and Google Android. I had endless calls from family where they couldn't access their banks anymore because they had a Huawei phone or a dumb phone. Banks are citing "security" as e…

Noticed this as well. It's a minor inconvenience for someone who is organised or is used to store secretes securely but a complete nightmare (including a security nightmare) for your average Joe. Thanks EU, thanks governments for your precious regulations that keep us safe. I wonder how many similar stories there are in fields I'm not an expert of.

The thing is - I read both EU and local regulations and they don't demand any certain approach to security. Nothing is stopping banks from providing a better experience except dire warnings and prescriptivism of security consultancies.

I talked with fintech founders and they mostly say "sure, we could give better user experience and then have a fight on our hands with auditors because we didn't fill out all the checkboxes from the reputable security consultancy that 'interprets' the requirements"

Re: Safari tries to fill username

#189
post #35

Earlier quoted context omitted.

No. This is a small but important detail: Chrome is the new IE. IE wasn't mainly a problem because it didn't support things, rather because it was - in the beginning - superior, but also had all sorts of non standard behaviour that Microsoft pushed and that made competition crazy hard. Oh, and also because they pushed it relentlessly in all ways including - as was later confirmed in court - illegal ways. Exactly like…

Both are the new IE, one push features without caring about the rest of the ecosystem and the other refuses to implement standards without caring about the rest of the ecosystem. The end result is that the web right now has stuff that works only on Chrome and stuff that works everywhere besides Safari. And the fact that iOS users can't change their browser forces developers that want their projects to reach the maxim…

> the other refuses to implement standards without caring about the rest of the ecosystem

There is standard, and standard as previously Chrome only feature that Firefox felt pressured to implement and was then a posteriori made into a standard.

Re: Safari tries to fill username

#190
post #62

Earlier quoted context omitted.

Oh man, enterprise "security" firms used by banks and other old behemoths are a cancer for users. If you want your website to actively abuse users (especially one with special needs and pretty much anyone that doesn't fit into an "made up average person mold") get those people on board and listen to the dumb things they say. I still can't believe that whole business managed to interpret 2FA for whole EU as "you MUST…

I use Coface for work to check credit for potential customers. Instead of a password, they require a 6-digit pin. It can't be auto-filled or entered with the keyboard. There's an on-screen number pad that you have to click on and the numbers are scrambled - they show up in a different arrangement every time. Such a pain!

Ah yes, the 2005 RuneScape bank method of security, very high tech
Post reply on HN