News for hackers. Stuff that matters.
Re:Substack's UI and 1Password temporarily cost me $2k by jwalton on Tuesday March 23, 2021 @12:52AM (#26551261)
I had a similar 1Password moment. I was buying airline tickets; entered my name, my wife’s name, address, declined insurance, declined hotel offer, scroll scroll scroll... Then I let 1Password fill in my payment details, which it did perfectly fine. But... what it ALSO did, on a field now well off the top of the screen, was change my wife’s first name to my full name.

I caught this when I got the confirmation email. I called the travel website, and they said since it was within 24 hours I could just cancel the tickets for free, or if I liked I could pay an outrageous fee to the airline to change the name on the ticket. Unsurprisingly I chose the former.

So, nor harm done, but if we’d gotten to the airport and my wife couldn’t come on holiday because I didn’t have a ticket for her... could have gone badly. :P

Re:Substack's UI and 1Password temporarily cost me $2k by DangerousPie on Tuesday March 23, 2021 @03:27AM (#26552067)
I had a similar story a few years ago, except it changed my birthdate rather than my name. Luckily I looked at the confirmation email for some reason and noticed it. Was a total nightmare to get that changed, although I didn't end up paying in the end.
Re:Substack's UI and 1Password temporarily cost me $2k by DavidMankin on Tuesday March 23, 2021 @09:51AM (#26554950)
A few years ago they wouldn’t let me board a flight from SFO to Australia because my visa said I was born in 1921 when my passport didn’t agree. After a good bit of hassle we just had me go and apply for (and pay for) another visa on the electronic application site and this time I noticed that it’s exactly what happened: 1Password (IIRC) used my Visa expiration year for my visa birthday.

I’m lucky that my status meant it was an automatic approval for the second visa!

Re:Substack's UI and 1Password temporarily cost me $2k by heavenlyblue on Tuesday March 23, 2021 @10:10AM (#26555206)
It's amazing though that they literally gave a visa to some other random person without any issue at all (i.e. not even cross-checking some values in your passport).
Re:Substack's UI and 1Password temporarily cost me $2k by m000 on Tuesday March 23, 2021 @10:19AM (#26555320)
> But... what it ALSO did, on a field now well off the top of the screen, was change my wife’s first name to my full name.

I also had a similar experience yesterday, with less expensive purchases fortunately.

The default behavior of 1Password auto-fill is wrong IMO. It should only fill fields after the field that currently has the focus. Not start filling whatever is available from the top of the page.

Re:Substack's UI and 1Password temporarily cost me $2k by whnless on Tuesday March 23, 2021 @04:23PM (#26559955)
I had the opposite experience a few years ago: I was a new user of password managers and did not let mine autofill when booking my plane.

The air carrier form was not consistent with my country's name nomenclature: First, Middle, Last instead of First (+second and third) and Last name. I filled it wrongly and had to pay $40 at the check-in counter because there was no passenger registered to my name on the flight.

Tried again with my password manager (Dashlane) a few days later and realized that I should have trusted it. Also, I know that it only fills fields after the selected one, not those before.

Re:Substack's UI and 1Password temporarily cost me $2k by voiper1 on Tuesday March 23, 2021 @04:52AM (#26552610)
Similar.... if the shipping and billing addresses are on the same page, I can't use a password manager. It always fills in both sets.