Should be right there next to the guy who wants you to type a long password into a short field where each character turns into an asterisk when you type it.
Because .... dunno ... there's someone in a black hood hanging from a rope above my head??
@Epic_Null @number6 that's a weird risk reduction idea.
Have spyware on my computer, then make my computer less accessible to me so the spyware has a more difficult time.
🤔
@beyondmachines1 @number6 Does that also not technically describe any remote desktop software used for tech support?
But yeah... definitely a weird risk reduction situation.
@Epic_Null Pasting passwords in password fields (masked by default) and displaying passwords are two different things.
Preventing pasting passwords DOESN'T protect you from spywares making screenshots… Copying passwords from a password manager doesn't imply displaying it.
On the contrary, preventing pasting passwords forces users to type it, and mostly likely, to display it from password managers in order to type it. Thus exposing it to M$' screenshot-based malware…
@devnull @Epic_Null @beyondmachines1
You're saying that it protects people from some hypothetical edge case where malware is recording and sending screenshots off into the internet, but that the developer forgot to capture keystrokes or clipboard contents?
The reality is that hacks occur because people get fatigued having to put in unique, long complicated passwords. Oh, and if they get it wrong 3 times they get locked out of their own data.
Asterisks hinder good security practices.
>> You're saying that it protects people from some hypothetical edge case where malware is recording and sending screenshots
No, I'm NOT. I said the exact opposite. That preventing pasting passwords DOESN'T protect from it.
Also, it's not "hypothetical"… I was answering to someone who mentionned "recall" which is micro$oft bullshit "AI that find data you might have accidently deleted" which does EXACTLY that: Screenthots your screen every few seconds…
@number6 Asterisks prevent anyone next to you to know your password is crao… Not to "hinder good security practices"
I won't answer to the rest of your post about "why hacks happens".
Any "single/unique reasons" that fits an easy narrative il total bullsiht… Security efis complicated
And the rest of your comment has nothing to do with my initial statement anyway. Also, I'm not interested in debating with someone claiming I said the exact opposite of what I said…
I'm tired of people acting as if M$ screenshot spyware BS and typical "AI" crap¹ wasn't a problem "cause real malware can capture your keystrokes".
Thanks captain obvious, I know how computers work, it pays my bills… And keystrokes has nothing to do with M$ malware "recall"…
1 To refer to stupid and intrusive continuous screenshots + OCR based spyware, recording everything people do on M$ OSes with builtin malware…
@number6 People are not supposed to "to put in unique, long complicated passwords" and complain about asterisks, which are not the problem
They're supposed to use local password, not "the claoud", not shitty DIY "encyption" in JS by random joe that you're "supposed to just trust" cause he slapped a megacorporporation logo on his crap code…
What hinders good security practices is stupid web devs preventing pasting in password (and to a lesser extent username) field