Live data from Hacker News

T-mobile password reset does not allow you to type the letter "V"

support.t-mobile.com

21–30 of 85 posts

Re: T-mobile password reset does not allow you to type the letter "V"

#21
post #6

Their entire site is a really bad example of ASP.NET development. As someone who knows the technology well, it can make great sites. It just rarely does. I like my T Mobile service but there's something odd with their backend systems and/or customer service. I logged in to disable their "WebGuard" service that seemed to be blocking pages at random. It required address and social security verification, but I couldn't…

Regarding your WebGuard issue, I actually had the same problem (they started blocking imgur!). For me, the actual issue was that the opt-out process does not work for prepaid accounts, but no one at T-Mobile call center knows that. I had to go into a store and show them my ID.

Re: T-mobile password reset does not allow you to type the letter "V"

#22
post #18

Earlier quoted context omitted.

>As someone who knows the technology well, it can make great sites Example?

Stack Overflow, for one.

SO is built with MVC, which encourages good development practices. T-Mobile looks to be using Web Forms. I'm sure there are good sites out there that use Web Forms, although as a .NET developer, I've found a that Web Forms encourages practices that I consider bad.

Re: T-mobile password reset does not allow you to type the letter "V"

#23

Apparently to prevent paste. Their CheckEnter.js file has: function keyDown(a) { if (a.keyCode == 86) { a.preventDefault() } } And that's assigned to onkeydown... Funny enough, elsewhere in their code, they do explicitly check for Ctrl & V/C.

And why prevent paste? Just ran into this recently on paypal when I wanted to change my password. I generated one in passpack and tried to paste it in, no can do. Ridiculous.

Re: T-mobile password reset does not allow you to type the letter "V"

#25
post #14

why would you want to stop paste? don't mobile devices have things like keypass? (i don't own a smartphone, but paste all passwords on my computers).

PayPal does this too. I don't get it. (Other than PayPal are jerks anyway so this fits.)

Does the right click, paste works on paypal?

Re: T-mobile password reset does not allow you to type the letter "V"

#26
post #22
post #18

Earlier quoted context omitted.

Stack Overflow, for one.

SO is built with MVC, which encourages good development practices. T-Mobile looks to be using Web Forms. I'm sure there are good sites out there that use Web Forms, although as a .NET developer, I've found a that Web Forms encourages practices that I consider bad.

Oh, agreed. It's just a shame to see the whole framework judged by the crappy WebForms implementations you see out there.

Re: T-mobile password reset does not allow you to type the letter "V"

#27
post #23

Apparently to prevent paste. Their CheckEnter.js file has: function keyDown(a) { if (a.keyCode == 86) { a.preventDefault() } } And that's assigned to onkeydown... Funny enough, elsewhere in their code, they do explicitly check for Ctrl & V/C.

And why prevent paste? Just ran into this recently on paypal when I wanted to change my password. I generated one in passpack and tried to paste it in, no can do. Ridiculous.

Apple does this, too. Not just on password change forms, but on login forms. Drives me nuts, as I use a password manager and my passwords are 24 characters of garbage.

Edit: Apparently I can't reply to the next comment, but keepassx also has the feature that passwords are cleared from the clipboard after 30 seconds.

Re: T-mobile password reset does not allow you to type the letter "V"

#28
T-Mobile also capitalized my password on me, once. It was fine for a couple years and then one day it stopped working. I got the site to text it to me (why do they even have it in plain text?) and all the letters had been capitalized somehow. (Previously was mixed-case.)

Re: T-mobile password reset does not allow you to type the letter "V"

#29
post #23

Earlier quoted context omitted.

And why prevent paste? Just ran into this recently on paypal when I wanted to change my password. I generated one in passpack and tried to paste it in, no can do. Ridiculous.

Apple does this, too. Not just on password change forms, but on login forms. Drives me nuts, as I use a password manager and my passwords are 24 characters of garbage. Edit: Apparently I can't reply to the next comment, but keepassx also has the feature that passwords are cleared from the clipboard after 30 seconds.

Clearly, having your password on the clipboard is a security issue. Storing your password in plain text, however, isn't.

Gotta love half-assed security measures. :)

Re: T-mobile password reset does not allow you to type the letter "V"

#30

Apparently to prevent paste. Their CheckEnter.js file has: function keyDown(a) { if (a.keyCode == 86) { a.preventDefault() } } And that's assigned to onkeydown... Funny enough, elsewhere in their code, they do explicitly check for Ctrl & V/C.

That's... hilariously bad. Doesn't tell good things about their code review processes (as in: wtf is a code riiviiu???111!!).
Post reply on HN