Browser auto-fill phishing

Re:Browser auto-fill phishing by theGimp on Thursday January 05, 2017 @03:16PM (#13330950)

My thinking is the user should explicitly autofill each field. Yes, it involves more work, but it's really not much work to click on a field and pick the right autofill value.

I'm always concerned about using autofill because browsers eagerly fill any field they have data for.

[ Parent | on HN ]

Re:Browser auto-fill phishing by Rumudiez on Thursday January 05, 2017 @03:23PM (#13331002)

This is how Firefox's autofill worked for me just now. Glad to see some more justification for getting off the Google train!

[ Parent | on HN ]

Re:Browser auto-fill phishing by hashhar on Friday January 06, 2017 @05:36AM (#13335323)

Firefox works that way and is in my view a much saner default. The best solution used to be in Opera long ago where they showed a little dropdown with the information that was going to be autofilled. You could accept it or deny it.

[ Parent | on HN ]

Re:Browser auto-fill phishing by circular_logic on Friday January 06, 2017 @06:39AM (#13335556)

That sounds like a fantastic idea for an extention.

[ Parent | on HN ]

Re:Browser auto-fill phishing by sytelus on Friday January 06, 2017 @08:42AM (#13336119)

That would be super bad user experience. Simple and better alternative would be to show everything being auto filled in page in a browser dialog and confirm from user before actually auto filling it.

[ Parent | on HN ]