News for hackers. Stuff that matters.
Re:Let them paste passwords by bradleyjg on Thursday May 18, 2017 @10:44AM (#14367608)
>> 1.) typing it out manually while you can't see if you made a mistake

This is my pet peeve. Password fields should not be obfuscated by default. It should be a toggle that is off on page load. Shoulder surfing is a corner case.

Re:Let them paste passwords by macintux on Thursday May 18, 2017 @10:59AM (#14367772)
Cameras are everywhere in public spaces, and most people wouldn't notice a password field wasn't obfuscated until they've already started typing. Defaulting to obfuscated seems the only sensible option.
Re:Let them paste passwords by zlynx on Thursday May 18, 2017 @01:33PM (#14369245)
But with a camera I can just see what you typed, with a fairly high accuracy.
Re:Let them paste passwords by macintux on Thursday May 18, 2017 @02:10PM (#14369593)
Video, yes. Stills, seems less likely.
Re:Let them paste passwords by zlynx on Thursday May 18, 2017 @02:59PM (#14370038)
Are there /any/ digital cameras these days that only do stills?
Re:Let them paste passwords by dkonofalski on Thursday May 18, 2017 @11:47AM (#14368223)
No way. The number of reported cases of passwords being stolen simply by physical proximity is enough to make this a sensible default. I agree that there should be an option to show the password as you're typing or, at a minimum, once you're done typing (less secure) but making that the default is unreasonable.