For Safari you can get Don't Fuck with Paste (and lots of other Don't Fuck with X options) with the Stop The Madness extension. https://underpassapp.com/StopTheMadness/
Came here to post this. It also works on iOS and on Firefox/Chrome on macOS.
Don't fuck with paste
251–260 of 397 posts
Re: Don't fuck with paste
#252Earlier quoted context omitted.
The Vimperator/Tridactyl (Firefox VI shortcuts extension) search / is not hijacked on the Stripe API documention.
FWIW, the / search isn't part of Tridactyl but we do inject some code that frees up / from most websites so Firefox can use it. It's possible to write your own user script to do it (you just need to add a keypress event handler that does preventDefault() and maybe stopPropagation()) with no need for Tridactyl :)
Good to know, thank you. Maybe non-Trydactyl users should check if / is hijacked along with Ctrl-F, Ctrl-G, and F3.
And I'll take the opportunity to say thank you for Tridactyl! Have a great weekend!
Re: Don't fuck with paste
#253In case of not being able to past I normally right click -> inspect element and in the console write $0.value="value from clipboard". Works almost everywhere.
Tampering with paste is kinda is like turning of autofill and the HTML5 standard is pretty clear when it should only be turned of: ".. particularly sensitive (for example the activation code for a nuclear weapon); or that it is a value that will never be reused (for example a one-time-key for a bank login) ..."
Re: Don't fuck with paste
#254Earlier quoted context omitted.
Even Apple was so annoyed at this themselves that they actually went for a full open-source open-for-contributions GitHub repository at https://github.com/apple/password-manager-resources to get around these issues. > Many password managers generate strong, unique passwords for people so that they aren't tempted to create their passwords by hand, which leads to easily guessed and reused passwords. Every time a passwo…
Ironically, apple.com itself is listed in this repository! Apparently they don't allow non-ASCII characters in passwords.
Jesus holy Apple pie!
ASCII only in 2023 seems positivity antique. And this from a supposed tech frontrunner! Wth...
Re: Don't fuck with paste
#255Just turn off Javascript with No-Script and selectively turn it on.
It makes the web such a better place.
Re: Don't fuck with paste
#256Earlier quoted context omitted.
Ironically, apple.com itself is listed in this repository! Apparently they don't allow non-ASCII characters in passwords.
Jesus holy Apple pie! ASCII only in 2023 seems positivity antique. And this from a supposed tech frontrunner! Wth...
Limiting characters can also be a feature, so users can't use emojis in their password (this is so fun), to realize later they can't login, because they don't know how to input emojis from their desktop computer.
Hopefully passwords will be gone soon (at least that's my hope).
Re: Don't fuck with paste
#257Earlier quoted context omitted.
Even Apple was so annoyed at this themselves that they actually went for a full open-source open-for-contributions GitHub repository at https://github.com/apple/password-manager-resources to get around these issues. > Many password managers generate strong, unique passwords for people so that they aren't tempted to create their passwords by hand, which leads to easily guessed and reused passwords. Every time a passwo…
Ironically, apple.com itself is listed in this repository! Apparently they don't allow non-ASCII characters in passwords.
I guess the plucky upstart password manager team has one problem to solve, the entrenched web services team has its own ways.
Re: Don't fuck with paste
#258Earlier quoted context omitted.
Even worse, some will simply arbitrarily silently truncate the password. But not everywhere! The sign up page might silently truncate and then the actual login page might not.
Wow. That would be a wonderful game of treasure hunt. Fortunately I've not come across that so far :D
What happened to me once is that a long-time password of mine got truncated as the website lowered it's maximum password length, and the login page didn't truncate, so my full correct password suddenly stopped working. The pain.
Re: Don't fuck with paste
#259Tangential at best, but this project made me think of evilpass, which is the funniest password validation scheme ever!
It probably does increase security, but it also gives the impression of actively hacking you.
Re: Don't fuck with paste
#260By disabling user input the application security actually gets worse. Users that can’t copy e.g. passwords will use less complex passwords to overcome the trouble of typing in their initially good passwords. But also user experience is degrading when applications enforce complex input and users generate that input like a chad as they should. But now they cannot paste…
I'll add to that systems that require particular characters to be used, like "must use capital, number and special character". I prefer to generate longer passwords but using only regular characters because I find it easier to type on the occasions I do have to do that. Even worse, there are some that restrict what kind of special character you can use. So even when I've generated one I still have to edit to remove o…
Shout out to forms which error out with "Password too long! Must be at most ten characters. All from this subset of ascii". Which seems especially popular with banks.