Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.misc > #3503

Re: The "Cobra Effect" that is disabling paste on password fields

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From polygonum <rmoudndgers@vrod.co.uk>
Newsgroups comp.misc
Subject Re: The "Cobra Effect" that is disabling paste on password fields
Date Tue, 03 Jun 2014 18:39:18 +0100
Organization me
Lines 41
Message-ID <bv6fibFld6kU1@mid.individual.net> (permalink)
References <lmhokh$2kb$1@dont-email.me> <lmjua0$otg$1@dont-email.me>
Reply-To rmoudndgers@vrod.co.uk
Mime-Version 1.0
Content-Type text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding 7bit
X-Trace individual.net RykzyAghD759zYeteSAZMQTCL2hWVbTXZNX3PxE0IE4d+BA7A=
Cancel-Lock sha1:tuzENVKsMy6DvX6OxveRlPJRkZ4=
User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
In-Reply-To <lmjua0$otg$1@dont-email.me>
Xref csiph.com comp.misc:3503

Show key headers only | View raw


On 03/06/2014 08:42, Gordon Henderson wrote:
> In article <lmhokh$2kb$1@dont-email.me>, Rich  <rich@example.invalid> wrote:
>> http://www.troyhunt.com/2014/05/the-cobra-effect-that-is-disabling.html
>> ...
>> "This became known as the Cobra Effect or in other words, a solution to
>> a problem that actually makes the whole thing a lot worse. Here\u2019s
>> a modern day implementation of the Cobra Effect as it relates to the
>> ability to paste your password into a login field:"
>>
>>   "@passy We'd lose our security certificate if we allowed pasting. It
>>   could leave us open to a "brute force" attack. Thanks ^Steve"
>
> With the now (?) obligatory references to XKCD:
>
> Not password, but: http://xkcd.com/970/
>
> and
>
>    http://xkcd.com/936/
>
> I complained to O2 once about them asking for my email address twice,
> refering the to 970, saying I'd just copy & paste, so they changed
> their webshite to block copy & paste. I'm not an O2 customer any more.
>
> Gordon
>
A boss of mine from many years back used to tell of his national service 
days back in the post WW2 years, 1950s I think. His assignment was 
guarding missiles which had a dual key system - one was in the 
possession of UK forces, the other of USA forces.

When one of the key-holders wanted to go off base for a while, they 
would hand the key over, often to this most junior person simply because 
he was not allowed to wander off. You will by now have realised that 
quite often both UK and USA key-holders passed their keys to the same 
person at the same time...

I too am an ex-O2 customer. Finally I have found out what 3G can deliver...

-- 
Rod

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

The "Cobra Effect" that is disabling paste on password fields Rich <rich@example.invalid> - 2014-06-02 11:53 +0000
  Re: The "Cobra Effect" that is disabling paste on password fields "tdk" <forum.tdk@squte.com> - 2014-06-02 08:27 -0500
    Re: The "Cobra Effect" that is disabling paste on password fields Rich <rich@example.invalid> - 2014-06-02 15:32 +0000
      Re: The "Cobra Effect" that is disabling paste on password fields Jerry Peters <jerry@example.invalid> - 2014-06-02 18:31 +0000
      Re: The "Cobra Effect" that is disabling paste on password fields Sylvia Else <sylvia@not.at.this.address> - 2014-06-03 13:15 +1000
        Re: The "Cobra Effect" that is disabling paste on password fields Rich <rich@example.invalid> - 2014-06-03 10:26 +0000
          Re: The "Cobra Effect" that is disabling paste on password fields Sylvia Else <sylvia@not.at.this.address> - 2014-06-03 21:03 +1000
          Re: The "Cobra Effect" that is disabling paste on password fields Jerry Peters <jerry@example.invalid> - 2014-06-03 20:20 +0000
            Re: The "Cobra Effect" that is disabling paste on password fields Rich <rich@example.invalid> - 2014-06-04 01:45 +0000
              Re: The "Cobra Effect" that is disabling paste on password fields Sylvia Else <sylvia@not.at.this.address> - 2014-06-04 17:16 +1000
                Re: The "Cobra Effect" that is disabling paste on password fields Rich <rich@example.invalid> - 2014-06-04 09:37 +0000
              Re: The "Cobra Effect" that is disabling paste on password fields Jerry Peters <jerry@example.invalid> - 2014-06-04 20:15 +0000
        Re: The "Cobra Effect" that is disabling paste on password fields Ben Bacarisse <ben.usenet@bsb.me.uk> - 2014-06-04 11:06 +0100
      Re: The "Cobra Effect" that is disabling paste on password fields Huge <Huge@nowhere.much.invalid> - 2014-06-05 18:41 +0000
    Re: The "Cobra Effect" that is disabling paste on password fields Paul Sture <nospam@sture.ch> - 2014-06-04 07:19 +0200
      Re: The "Cobra Effect" that is disabling paste on password fields Rich <rich@example.invalid> - 2014-06-04 10:00 +0000
        Re: The "Cobra Effect" that is disabling paste on password fields David Harmon <source@netcom.com> - 2014-06-04 07:54 -0700
        Re: The "Cobra Effect" that is disabling paste on password fields Mike Spencer <mds@bogus.nodomain.nowhere> - 2014-06-04 23:49 -0300
          Re: The "Cobra Effect" that is disabling paste on password fields "tdk" <forum.tdk@squte.com> - 2014-06-05 05:55 -0500
  Re: The "Cobra Effect" that is disabling paste on password fields Gordon Henderson <gordon+usenet@drogon.net> - 2014-06-03 07:42 +0000
    Re: The "Cobra Effect" that is disabling paste on password fields polygonum <rmoudndgers@vrod.co.uk> - 2014-06-03 18:39 +0100
    Re: The "Cobra Effect" that is disabling paste on password fields scott@alfter.diespammersdie.us (Scott Alfter) - 2014-06-04 16:00 +0000

csiph-web