News for hackers. Stuff that matters.
Re:The Effectiveness of Publicly Shaming Bad Security by Cthulhu_ on Tuesday September 11, 2018 @08:25AM (#17959047)
As a naive non-security expert, I'd consider it a risk to put passwords in the clipboard - what if there's something that can read your clipboard? JS on another site for example? What if you accidentally paste it on a 3rd party site?

That's copying it though. I know a decent password manager will clear the clipboard after an X amount of time too, mitigating the risk somewhat. But that's copying, not pasting in a field.

Re:The Effectiveness of Publicly Shaming Bad Security by foo101 on Tuesday September 11, 2018 @08:40AM (#17959149)
How does a site disabling "paste from clipboard" protect my password that I have already copied to clipboard?

Note that I would copy the password first and then I would realise that the site is not allowing me to paste it.

Re:The Effectiveness of Publicly Shaming Bad Security by virtualized on Tuesday September 11, 2018 @09:38AM (#17959576)
If a browser allows websites to read the clipboard, that's a security bug in that browser.