Live data from Hacker News

Don't fuck with paste

github.com

241–250 of 397 posts

Re: Don't fuck with paste

#241

You shouldn't need to trust an addon for this, it's something you should be able to set in the browser. In firefox you can toggle dom.event.clipboardevents.enabled

Or you can hold shift button while right clicking to force open menu.

My bank bans right click in addition to ctrl v.

Re: Don't fuck with paste

#242

Earlier quoted context omitted.

I just don't get it why browsers allow websites to override their own hotkeys. I'm sure it even required extra code to be written to work correctly. Linear hijacks Cmd+F for example, very helpfully providing some terrible thing instead of my browser's built-in search that works the same everywhere. (it's the same Linear that thinks you can't not want wysiwyg markdown editing)

Well, for Ctrl+F there is sometimes a reason. Many websites uses technique called virtualization of lists. That boosts performance, but standard Ctrl+F doesn't works anymore properly

The good sites allow you to hit ctrl f twice to get browser's find feature.

Re: Don't fuck with paste

#243

> In order to provide the smoothest experience as possible, the extension needs to know when you change active tabs. In order for the extension to know about that event, it needs the tabs permission, which Chrome describes as "can read and change all your data on websites you visit." That description is very scary, and is certainly not what this extension is doing. Being an open-sourced project, you can always read a…

The thing is there is no alternative way to do this. I have written some extensions my self and often you cant do anything without having full read and write access to every page. For example I have an extension that lets you right click an image and rotate it by -90/+90/180 degrees. All I want is for the browser to hit me up when there is a ` ` tag, but that is not an option. Either I have to white list every page s…

> The thing is there is no alternative way to do this.

Maybe. But this is not clear at all from the given explanation:

> In order to provide the smoothest experience as possible, the extension needs to know when you change active tabs.

The "smoothest experience"... This is corporate wooden language, and sounds disrespectful towards the users. Why does the extension need, precisely, to deal with tabs at all? A smooth experience would allow the users the choice to disable this permission while still working correctly on a single tab (as the previous version did). If this is not clearly explained upfront, it sounds like bullshit, even if it isn't.

Maybe there is no alternative way to do this. But certainly there is an better way to explain this.

Re: Don't fuck with paste

#244
post #234

Earlier quoted context omitted.

I'll add to that systems that require particular characters to be used, like "must use capital, number and special character". I prefer to generate longer passwords but using only regular characters because I find it easier to type on the occasions I do have to do that. Even worse, there are some that restrict what kind of special character you can use. So even when I've generated one I still have to edit to remove o…

Even Apple was so annoyed at this themselves that they actually went for a full open-source open-for-contributions GitHub repository at https://github.com/apple/password-manager-resources to get around these issues. > Many password managers generate strong, unique passwords for people so that they aren't tempted to create their passwords by hand, which leads to easily guessed and reused passwords. Every time a passwo…

Ironically, apple.com itself is listed in this repository! Apparently they don't allow non-ASCII characters in passwords.

Re: Don't fuck with paste

#245
post #195

Earlier quoted context omitted.

I'll add to that systems that require particular characters to be used, like "must use capital, number and special character". I prefer to generate longer passwords but using only regular characters because I find it easier to type on the occasions I do have to do that. Even worse, there are some that restrict what kind of special character you can use. So even when I've generated one I still have to edit to remove o…

> Even worse, there are some that restrict what kind of special character you can use Even worse , there are some that restrict special characters, but don't tell you which! Now you've got to go trial and error to find out which of the special characters in your password is not acceptable to that precious §("/$& website!

Even worse are "secure answers." Aka osint. I just have my password manager create passwords for those too.

Re: Don't fuck with paste

#246

Earlier quoted context omitted.

FWIW, the / search isn't part of Tridactyl but we do inject some code that frees up / from most websites so Firefox can use it. It's possible to write your own user script to do it (you just need to add a keypress event handler that does preventDefault() and maybe stopPropagation()) with no need for Tridactyl :)

But it still doesn't seem to work on GitHub, did you whitelist GitHub for the preventDefault or is GitHub just a bit extra when it comes to hijacking keybinds?

It works sometimes on GitHub, it's just a bit extra as you said.

GitHub is what annoyed me enough to make the feature in the first place. It used to work reliably but they made it worse :(

Re: Don't fuck with paste

#247

A couple alternative ways to paste, at least in my current Linux environment: - Paste the text somewhere else, then drag it onto the text field - Highlight the text elsewhere, and middle-click on the text field I've only ever found one site that blocks both of those too.

[picks up chunks of brain off the ceiling] Just tried: Bitwarden allows dragging and dropping (hidden) fields into text boxes.

Re: Don't fuck with paste

#248
post #197

Anyone one else noticed OP got 399 upvotes for sharing a fork with no significant upgrades compared to the original repo?

Original repo author rejected the PR for Firefox support, so the owner of the fork did just that - fork to add 6 lines of manifest:

https://github.com/jswanner/DontF-WithPaste/pull/29

(I admit though that the unrelated .gitignore change had nothing to do in the original PR)

Re: Don't fuck with paste

#249

Earlier quoted context omitted.

Even worse, when on top of all these they add an arbitrary length requirement: It can't be less than 8 letters OR more than 12. :|

Even worse, when the password has an arbitrary length requirement of 20, but the site doesn't tell you and just cuts of any trailing characters exceeding the requirement during account creation. You have no idea how long it took me to figure that one out.

That sounds suspiciously like a VARCHAR(20) somewhere...

Re: Don't fuck with paste

#250
Find it utterly infuriating when devs feel the need to disable me autocomplete settings, spellchecking or paste.

Like I have a setting to auto insert my email if I type @@ and so many input fields have text complete disabled somehow despite me using it as a sure fire way my email is correct.

Disabling spellchecking or rolling your own spellchecking is the most egregious of all

Post reply on HN