Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't fuck with paste

github.com

Post reply on HN
Print view View original

181–190 of 397 posts

Re: Don't fuck with paste

#181

Post by BasieP2 »

nsinreal wrote: post #175
grishka wrote: post #173

Earlier quoted context omitted.

I just don't get it why browsers allow websites to override their own hotkeys. I'm sure it even required extra code to be written to work correctly. Linear hijacks Cmd+F for example, very helpfully providing some terrible thing instead of my browser's built-in search that works the same everywhere. (it's the same Linear that thinks you can't not want wysiwyg markdown editing)

Well, for Ctrl+F there is sometimes a reason. Many websites uses technique called virtualization of lists. That boosts performance, but standard Ctrl+F doesn't works anymore properly

I know of 2 websites that do this. 1. Confluence It's super annoying and takes up a lot of screen space 2. Nexus It simply kills it. You can use ctrl-f but it simply will not find text right in front of you..

Really i see no valid case

Re: Don't fuck with paste

#182

Post by koenraad »

By disabling user input the application security actually gets worse. Users that can’t copy e.g. passwords will use less complex passwords to overcome the trouble of typing in their initially good passwords. But also user experience is degrading when applications enforce complex input and users generate that input like a chad as they should. But now they cannot paste…

Re: Don't fuck with paste

#183

Post by themoonisachees »

BLKNSLVR wrote: post #141
dkjaudyeqooe wrote: post #52

To work around this I usually drag and drop text pasted into the URL field or somewhere, on my Mac at least. Can I just say though that disabling paste, apparently in the name of security, is the dumbest shit I have ever encountered, right in front of ultra short timeouts everywhere. If only I could meet the people who make these decisions in person...

Even MS Remote Desktop doesn't allow it. Why do they think password managers exist?

Mstsc doesn't allow it because the login screen for windows doesn't have copy-paste. It's not that it has been disabled, it's that it was never programmed to have something in the clipboard before logging in. Still, they probably could load the thing first easily, but it's Microsoft we're talking about.

Re: Don't fuck with paste

#184

Post by rasz »

BasieP2 wrote: post #181
nsinreal wrote: post #175

Earlier quoted context omitted.

Well, for Ctrl+F there is sometimes a reason. Many websites uses technique called virtualization of lists. That boosts performance, but standard Ctrl+F doesn't works anymore properly

I know of 2 websites that do this. 1. Confluence It's super annoying and takes up a lot of screen space 2. Nexus It simply kills it. You can use ctrl-f but it simply will not find text right in front of you.. Really i see no valid case

github code editor is a big one

Re: Don't fuck with paste

#185

Post by bluish29 »

For me this is annoying and I really hate websites hijacking paste. But it is more annoying on the phone specially when creating passwords with password manager. Does anyone know something that will work for safari?

Re: Don't fuck with paste

#186

Post by themoonisachees »

amethyst wrote: post #57
autoexec wrote: post #38

You shouldn't need to trust an addon for this, it's something you should be able to set in the browser. In firefox you can toggle dom.event.clipboardevents.enabled

I wish I could selectively disable only the "paste" events, because it's extremely useful to have "click to copy this value" type of buttons in our various work tools, and I miss the ability to do that every time I try turning off clipboard events to deal with bad actors.

The solution to this is to treat your clipboard as public in the long term. Don't keep sensitive data in it for longer than you need it. KeePass does this and it's great.

Re: Don't fuck with paste

#187

Post by globular-toast »

koenraad wrote: post #182

By disabling user input the application security actually gets worse. Users that can’t copy e.g. passwords will use less complex passwords to overcome the trouble of typing in their initially good passwords. But also user experience is degrading when applications enforce complex input and users generate that input like a chad as they should. But now they cannot paste…

I'll add to that systems that require particular characters to be used, like "must use capital, number and special character". I prefer to generate longer passwords but using only regular characters because I find it easier to type on the occasions I do have to do that.

Even worse, there are some that restrict what kind of special character you can use. So even when I've generated one I still have to edit to remove one particular character.

Would it really be that difficult to display password strength and say things like "use more characters, e.g. you could use four words".

Re: Don't fuck with paste

#188

Post by alpaca128 »

arp242 wrote: post #95
gruez wrote: post #88

Earlier quoted context omitted.

IME this breaks paste functionality in some web apps (eg. certain terminal emulators or text editors)

The worst is when it breaks web apps in really confusing, weird, and broken ways. Slack, for example. Pasting becomes a complete clusterfuck. Things paste in the wrong location, incompletely, etc. I have no idea how they manage to fuck up "paste in a text box"... Facebook Messenger also broke last time I used it where the tab would start using 100% CPU, but it's been a few years since I last used it, so don't know if…

> I have no idea how they manage to fuck up "paste in a text box"...

For over 5 years Enter has been broken in YouTube's comment text fields. It inserts a new line but often won't move the cursor. Last year for a while they changed the text to black in the dark theme and it was impossible to write comments because the text fields simply never showed up.

Re: Don't fuck with paste

#189

Post by geraldhh »

assimpleaspossi wrote: post #180

Do we really have to put up with vulgarity even on HN? It's bad enough to see it in the title--cause someone will say that's what the title is--but, as can be seen, it breeds unnecessary vulgarity throughout this thread. To see the irony of it all, I'll get fucking downvoted for fucking complaining about this fucking shit and maybe get really fucked up by getting fucking banned. Do you get my fucking point?

vulgarity in the tile makes sense, in your comment not so much.

if you don't get the point you may gtfo or make new account

Post reply on HN