In a similar vain some of the AWS console pages make it hard to select text and use ctrl^c to copy it. It often deselects the text as soon as you hit ctrl. It is extremely irritating.
Don't fuck with paste
91–100 of 397 posts
Re: Don't fuck with paste
#92Firefox has some about:config settings for this:
* dom.event.clipboardevents.enabled
* dom.allow_cut_copy
And also, the ability to force a paste as plaintext or force right-clicks to behave properly by using shift.
Re: Don't fuck with paste
#93Earlier quoted context omitted.
The only one I've ever heard is "security." Sometimes people try to "yeah it's because for security we don't want some tool to paste credentials or clickjacking mumble something malware hacking clipboard spyware javascript browser" but most of the time the truth is "our sec people need to show controls for hardening the authentication process so they came up with that and we just did it because it wasn't worth the fi…
Too much gets justified with vague, handwavey "because security" excuses. We can't do this because... uh... because security, yea, that's it! It should be "Specific vulnerability or GTFO."
Yeah. NordVPN is an example of this handwaviness. They refuse to delete my account to which I can successfully log into and which I've never used because they claim that as "a security-oriented company we do not take account change or deletion requests lightly, hence we request payment information to confirm ownership of the account, as we would not want anyone but the rightful owner making such changes." Problem being, I've never paid NordVPN, and when I told them as much and asked what security problem could result from them deleting an unused account, they didn't respond.
Re: Don't fuck with paste
#94You shouldn't need to trust an addon for this, it's something you should be able to set in the browser. In firefox you can toggle dom.event.clipboardevents.enabled
Or you can hold shift button while right clicking to force open menu.
Re: Don't fuck with paste
#95You shouldn't need to trust an addon for this, it's something you should be able to set in the browser. In firefox you can toggle dom.event.clipboardevents.enabled
IME this breaks paste functionality in some web apps (eg. certain terminal emulators or text editors)
The worst is when it breaks web apps in really confusing, weird, and broken ways.
Slack, for example. Pasting becomes a complete clusterfuck. Things paste in the wrong location, incompletely, etc. I have no idea how they manage to fuck up "paste in a text box"...
Facebook Messenger also broke last time I used it where the tab would start using 100% CPU, but it's been a few years since I last used it, so don't know if that's still the case.
Anyway, I really wish I could do this per website. I have it disabled because GitHub started doing weird and annoying shit when I copy/paste stuff from comments and I absolutely hate it. But ... then it breaks Slack :-/
Re: Don't fuck with paste
#96This was one of those things that frustrated me so much that we ended building this natively into Orion browser (Tools menu -> Allow Copy & Paste). [1] One of the joys of building your own browser. [1] https://kagi.com/orion
How would you rate the security posture of Orion compared to Chrome?
Well, there are apparently whole classes of JavaScript malware that Orion blocks but Google doesn't...
Re: Don't fuck with paste
#97Re: Don't fuck with paste
#98Re: Don't fuck with paste
#99To work around this I usually drag and drop text pasted into the URL field or somewhere, on my Mac at least. Can I just say though that disabling paste, apparently in the name of security, is the dumbest shit I have ever encountered, right in front of ultra short timeouts everywhere. If only I could meet the people who make these decisions in person...
> right in front of ultra short timeouts everywhere
> If only I could meet the people who make these decisions in person...
For what it's worth, I was once forced to implement a half hour auto-logout on a website that could hardly be considered as containing sensitive data because an external pentest firm flagged the lack of a short timeout as an issue. The only way we could show clients a passing pentest was to comply with all of the findings. We all knew it was stupid but management gave us no choice but to implement it.
Re: Don't fuck with paste
#100This[1] alternative bookmarklet was posted here a while back. [1]: https://bookmarkl.ink/ashtonmeuser/6e3869d8e468e016f22a4b4de...
Bookmarklets are seriously undervalued. This is a simple and more importantly readable fix for the issue.
I really wish bookmarklets caught on more. They can provide a lot of the value of extensions, without running all the time and bogging down the browser (or tracking the user around the web). The lack of persistent tracking is probably what led companies like Amazon to abandon them.