Mastodawn

Lauren Weinstein Jan 16, 2023

Greetings. I wish I'd gotten a screenshot of this one, but I saw a registration form today that was one of the worst examples of "password hell" I've ever seen. I think it had about 10 lines of requirements, stuff like:

Must be 9 to 14 characters.
Must include both lower and uppercase alphabetics.
Must include numbers.
Must include special characters.
Can't have more than three alphabetics in a row.
Can't have more than three numbers in a row.
Can't have more than three special characters in a row.
... and so on.

OH, and of course, copy/paste was disabled for both username and password, so this all had to be hand typed TWICE for confirmation. AND ... the typed password was obscured with no way to choose to display it.

And you wonder why the Galactic Federation has quarantined this planet.

Best, -L

Show thread

Dethe Elza Jan 16, 2023

@lauren Make this snippet of JavaScript a bookmarklet and you will always have a way to toggle display of passwords:
javascript:document.querySelectorAll('[type=password],[type=pwd').forEach(p=>p.type=p.type==='password'?'pwd':'password');void(0);

Show thread

1729 Jan 17, 2023

@dethe @lauren honestly this is a great hack, and the process for implementing it seems easy enough for many users outside the dev/it community to carry out, in the [hopefully] short term while waiting for the UI design culture to catch up.

Show thread

Lauren Weinstein

@1729 @dethe Really a bad idea for most people to play around with that stuff. It's a good way to get really messed up when dealing with some sites with unusual coding practices.