News for hackers. Stuff that matters.
Re:Safari tries to fill username by Cthulhu_ on Friday May 28, 2021 @07:54AM (#27314274)
After 15 minutes, or 15 minutes of inactivity? The latter is defensible at least, in e.g. a public area where there is a risk of people leaving their desktops without locking them. I mean that's another policy issue that can be addressed (a policy that locks a system after x amount of inactivity), but as an app developer you can't know much about the system things are running on.
Re:Safari tries to fill username by Retric on Friday May 28, 2021 @08:28AM (#27314559)
Careful. Filling out a long form isn’t 15 minutes of inactivity, but a huge range of websites assume it is.
Re:Safari tries to fill username by hallway_monitor on Friday May 28, 2021 @08:57AM (#27314826)
PTSD causes me to copy and paste big blocks of text out of a text area before submitting every time.
Re:Safari tries to fill username by ta988 on Friday May 28, 2021 @09:17AM (#27314979)
sounds like what an extension could do. store in localstorage the last hour of forms. I especially hate clicking submit to get an error and an empty form again.
Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @09:52AM (#27315306)
Ugh, a form that takes 15 minutes or more to fill out, without any feedback or other interaction, is itself a UX problem. It should at least be auto-saving.
Re:Safari tries to fill username by egypturnash on Friday May 28, 2021 @10:49AM (#27315994)
More likely it will have a “submit” button that runs a script that blocks submission wen you missed a field. And wipes out a couple of other fields (usually passwords) so that you have to re-enter those after hitting that “submit” button again.
Re:Safari tries to fill username by cactus2093 on Friday May 28, 2021 @08:44AM (#27314716)
But should all sites really be optimized for the user at a public library computer? At the expense of convenience for the large majority of users that are on a personal or work computer? Doesn’t make much sense to me.

Also the computer itself solves this problem for you in many cases, a guest profile typically deletes all browser session info when you log out.

Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @09:44AM (#27315224)
All sites? Probably not.

Many sites? Probably.

You're assuming people log out reliably or otherwise behave in the most secure way. They don't.

I also don't see how logging out/killing a session after 15 minutes of inactivity is much of a hardship for the user.

Re:Safari tries to fill username by fauigerzigerk on Friday May 28, 2021 @11:02AM (#27316208)
I hate _all_ sites that do this and I actively avoid them. There are many very good reasons why I might not be able to complete a form without interruption. It's not for them second guess me.

And it's not just extremely annoying, it's also completely unnecessary. Just put a "trust this browser" checkbox on the sign-in page and adjust the session timeout accordingly.

Re:Safari tries to fill username by alistairSH on Friday May 28, 2021 @11:28AM (#27316548)
Just put a "trust this browser" checkbox on the sign-in page and adjust the session timeout accordingly.

That works. It defaults to the "safe" behavior, but allows users to self-select into other behavior that they find less objectionable.

FWIW, my end-users are using public computer labs, so we have to build for the worst-case in terms of user security habits.