bdjegifjdvwMar 13

I love password based login

https://lemmy.world/post/44211348

Show threadLiveLM

The best I’ve seen was yesterday where a website had the log-in button greyed out after the password manager filled my creds in.
So I had to manually clock both the email and password field. Just click them. Then it enabled the log-in button.
So someone took their time to write a piece of JS that said “If the user hasn’t focused both fields at least once, no login”. Literally why? Extra code that does nothing useful.

I was hoping passkeys would be the solution to this madness, but it seems to me the entire spec gives too much power to the OS Makers and too little to the users because “mUh AtTtEsTatIoN” so now I don’t know anymore

Mar 13 at 6:03pmWeb
Show threadGumbyMar 13
I’ve definitely run into that. Even more frustrating is when there was one particular site that forced me to actually delete the last character of my password and then retype it. Just focusing in the field wasn’t enough, I had to actually send it a keystroke. And Ctrl-V to paste the password in manually didn’t count. I suppose typing a random character at the end and then deleting it would have worked too.
Show threadJessicaMar 13
I used to have this problem with the payroll website ADP! So cursed
Show threadtowerfulMar 13
When ctrl+v is disabled to “prevent brute force bots” or something ridiculous
Show threadkazernielMar 14
that’s when I grab my trusty Don’t Fuck With Paste
Don't Fuck With Paste – Get this Extension for 🦊 Firefox (en-GB)

Download Don't Fuck With Paste for Firefox. This add-on stops websites from blocking copy and paste for password fields and other input fields.

Show threadSir_KevinMar 13
I’ve seen this a stupid number of times. I wish I could remember which websites…
Show threadspizzat2Mar 13

My utitlies website doesn’t let you login if the password field is autofilled by the browser. Whatever Angular-based form validation they are using doesn’t play nice with Firefox’s saved password feature. You have to manually type something in the password field, so I always add and remove a space from the password.

I sent an email to their support, hoping they would fix it, but they just responded saying that they can’t reproduce it.

Well, I can reproduce it. I even told you how. That sounds like a skill issue.

Show threadbrbpostingMar 14
lol nice, this is one tech thing I have not complained about even though I hit it a few times a year
Show threadTheSeveralJourneysOfReemusMar 13
the user must be a human, so i imagine that being the rationale.
Show threadPasserby6497Mar 14
Oh, it gets worse. I’ve had some where I have to enter a character into the boxes before it would figure its shit out…
Show threadricecakeMar 14

They inevitably didn’t write it for that reason. They wrote it to say the field is invalid until the user changes it to be valid after someone landed on the page holding the enter key down and instantly locked themselves out after submitting the form 50 times in 3 seconds.
Unless you know otherwise, it’s easy to think that “form interaction” is the same as “form changed”, and one of those is much easier to check.

I’m unsure what you mean about passkeys. I don’t think I’ve heard anyone mention significant concessions to os makers and I’m pretty tuned in on the topic.

Show threadJensSpahnpastaMar 14
It’s not perfect but will break many bot logins and people trying different logins from data leaks.
Show threadLiketearsinrainMar 14
Bots will just use the underlying endpoint.
Show threadlambaliciousMar 14

So someone took their time to write a piece of JS that said “If the user hasn’t focused both fields at least once, no login”. Literally why? Extra code that does nothing useful.

If anything, 30 seconds in Greasemonkey should fix that one (either blocking the function that is doing it, or manually firing click events on the fields).