The Effectiveness of Publicly Shaming Bad Security

Re:The Effectiveness of Publicly Shaming Bad Security by foo101 on Tuesday September 11, 2018 @08:39AM (#17959139)

> you leave the password in the clipboard, and another website copies it (used to be a thing, I think it's patched now)

Even if it were not patched, how a site disabling "paste from clipboard" remove my password that I have already copied to clipboard.

Note that I would copy the password first and then I would realise that the site is not allowing me to paste it.

[ Parent | on HN ]

Re:The Effectiveness of Publicly Shaming Bad Security by guntars on Tuesday September 11, 2018 @09:22AM (#17959478)

You only realize that the field doesn’t support pasting once and don’t attempt it ever again. If it allows pasting, the password will be in the clipboard every time you log in, which arguably could be more times than one.

[ Parent | on HN ]

Re:The Effectiveness of Publicly Shaming Bad Security by hiccuphippo on Tuesday September 11, 2018 @10:20AM (#17959924)

No, the next time I try again and after it fails again then remember they didn't allow it and curse them for not fixing it already. Then repeat the process.

[ Parent | on HN ]

Re:The Effectiveness of Publicly Shaming Bad Security by thecatspaw on Tuesday September 11, 2018 @09:22AM (#17959473)

if the issue is that it stays in the clipboard the site could just remove it once pasted or when sending the form

[ Parent | on HN ]

Re:The Effectiveness of Publicly Shaming Bad Security by foo101 on Tuesday September 11, 2018 @09:26AM (#17959503)

I am not familiar with JavaScript. Could someone share some sample JavaScript code that shows how it allows the browser to modify my system clipboard?

[ Parent | on HN ]

Re:The Effectiveness of Publicly Shaming Bad Security by zmw on Tuesday September 11, 2018 @12:14PM (#17961049)

Check out clipboard.js.

[ Parent | on HN ]