Re:Substack's UI and 1Password temporarily cost me $2k
by reilly3000 on Tuesday March 23, 2021 @12:33AM
(#26551158)
Gah what then? I use strong passwords but almost all of them flow through my clipboard.
[ Parent
| on HN ]
Re:Substack's UI and 1Password temporarily cost me $2k
by Saris on Tuesday March 23, 2021 @09:16AM
(#26554581)
I used to use Keepass with auto-type. I had a hotkey for it, and it would recognize the site based on the browser window title.
That would probably be the best of both, no clipboard, and no browser addons.
Re:Substack's UI and 1Password temporarily cost me $2k
by lawtalkinghuman on Tuesday March 23, 2021 @09:47AM
(#26554885)
Instead of checking the TLS certificate or the domain, you are depending on fak3b00k.com not implementing the same title tag as Facebook?
Re:Substack's UI and 1Password temporarily cost me $2k
by Saris on Wednesday March 24, 2021 @05:56PM
(#26573495)
That's something to think about. But I'm not sure how I would end up on fak3b00k.com unless something changed my bookmark for it, or I really mistyped it but if I did that the URL being different is a dead giveaway.
Re:Substack's UI and 1Password temporarily cost me $2k
by abdullahkhalids on Tuesday March 23, 2021 @02:40AM
(#26551790)
Some password managers will type the username/password into the browser (through a virtual keyboard I think), not copy-paste them to protect against clipboard attacks. Eg. Keepasssc
Re:Substack's UI and 1Password temporarily cost me $2k
by 3np on Tuesday March 23, 2021 @02:18AM
(#26551665)
There are non-browser-extension password managers that still emulate you typing on your keyboard, rather than going through clipboard.
Personally I use rofi-pass to access GNU pass passwords (so just a hotkey and search for password name)
I'd warmly recommend it (or whatever other client you use for GNU pass) but I'm sure you can find similar functionality for any other decent password manager.
Re:Substack's UI and 1Password temporarily cost me $2k
by mPReDiToR on Tuesday March 23, 2021 @07:50AM
(#26553908)
Firefox extension, Passhash NG.
Makes them easy to use, with no saved PW.
Re:Substack's UI and 1Password temporarily cost me $2k
by jhanschoo on Tuesday March 23, 2021 @01:49AM
(#26551544)
I a simple algorithm to generate a password based on the name of the service you are using, interleaved with a constant master password you remember. You can do the same thing with a password-manager password + clipboard, interleaved with a constant master password you remember, which should be even better.