I normally just inspect the element in dev tools and disable the attached paste event handler. Not the most convenient way, but also I don’t need to do it all that often
Don't fuck with paste
281–290 of 397 posts
Re: Don't fuck with paste
#282Earlier quoted context omitted.
> Even worse, there are some that restrict what kind of special character you can use Even worse , there are some that restrict special characters, but don't tell you which! Now you've got to go trial and error to find out which of the special characters in your password is not acceptable to that precious §("/$& website!
Even worse, when on top of all these they add an arbitrary length requirement: It can't be less than 8 letters OR more than 12. :|
This all reminds me of the password game: https://neal.fun/password-game/ I'd call it amusing if it weren't so often real.
For a more entertaining take, I really enjoy this use of it against scammers and thieves: https://www.youtube.com/watch?v=knhQ2f8anT8
Re: Don't fuck with paste
#283Earlier quoted context omitted.
It would be more transparent to be candid about the limitation of what they can provide. It isn’t the developer’s fault that the ecosystem is dumb, but they could just note the limitation.
So you're saying they shouldn't add the feature rather than asking for the permission?
No, they should just note the issue in a parenthetical aside.
Re: Don't fuck with paste
#284Anyone one else noticed OP got 399 upvotes for sharing a fork with no significant upgrades compared to the original repo?
IMO upvotes are due more to a "Yes, I agree, hate when that happens" than a "Thank you for this useful tool OP"
Re: Don't fuck with paste
#285By disabling user input the application security actually gets worse. Users that can’t copy e.g. passwords will use less complex passwords to overcome the trouble of typing in their initially good passwords. But also user experience is degrading when applications enforce complex input and users generate that input like a chad as they should. But now they cannot paste…
In addition, they will probably also still try to copy to clipboard first, since they probably don't use that interface often enough to remember its special rule.
Re: Don't fuck with paste
#286To work around this I usually drag and drop text pasted into the URL field or somewhere, on my Mac at least. Can I just say though that disabling paste, apparently in the name of security, is the dumbest shit I have ever encountered, right in front of ultra short timeouts everywhere. If only I could meet the people who make these decisions in person...
Here was a dumb one from me the other day. - I had to use login.gov - My password manager had a saved login for it, I didn’t remember it, but it worked - Then the site asked me for an authenticator app code. I checked my authenticator apps and there was nothing there for login.gov. - There’s a login another way button so I click that and the other way is use the authenticator app! - I click what if I can’t get my cod…
I would guess that the 24 hour delay is to allow the real owner of the account a change to cancel the delete if someone tries to mess with their account.
That said, you're right. This is really weird.
Re: Don't fuck with paste
#287I use Hammerspoon for Mac, have a shortcut set up for Cmd+Shift+V to actually type the letters rather than use the paste function. Works every time someone pulls this stunt.
> hs.hotkey.bind({"cmd", "shift"}, "V", function() hs.eventtap.keyStrokes(hs.pasteboard.getContents()) end)
Re: Don't fuck with paste
#288I use Hammerspoon for Mac, have a shortcut set up for Cmd+Shift+V to actually type the letters rather than use the paste function. Works every time someone pulls this stunt. > hs.hotkey.bind({"cmd", "shift"}, "V", function() hs.eventtap.keyStrokes(hs.pasteboard.getContents()) end)
I do the same with AutoHotkey for Windows. It's also come in handy in remote connection GUIs that default to the remote clipboard and legacy desktop applications with controls that don't support pasting.
Re: Don't fuck with paste
#289Right up there with hijacking Ctrl-F.
So much this.
Re: Don't fuck with paste
#290Right up there with hijacking Ctrl-F.
Recently learned that if you Ctrl-F again after the highjacking, it brings up the browser search box. Discovered this thanks to a site (don't remember which) that included a tooltip about this fact in their hijacked search box. I was curious if it would work on Redocly search, which has no such tooltip, and it did. I'm not positive if this works universally, or is just an undocumented feature of Redocly's interface a…
It's a feature built-in to most browsers, same with right-click (if page hijacks right click, right-click twice in rapid succession).