Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Huge <Huge@nowhere.much.invalid>
Newsgroups: comp.misc
Subject: Re: The "Cobra Effect" that is disabling paste on password fields
Date: 5 Jun 2014 18:41:58 GMT
Organization: Piglet's Pickles & Preserves
Lines: 22
Message-ID: <bvbrvmFphs1U2@mid.individual.net>
References: <lmhokh$2kb$1@dont-email.me> <6242#28221@usenet.squte.com> <lmi5du$15e$1@dont-email.me>
Reply-To: usenet@huge.org.uk
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Trace: individual.net a0DIc2i3plSlvRy0JVnSlgRfQMp5BUOjCuqlHYz79WoM/ufStj
Cancel-Lock: sha1:WVZxpSMcvYorgPvVQ3tn2W8/+zk=
X-No-Archive: Yes
User-Agent: slrn/pre1.0.0-16 (Linux)
Xref: csiph.com comp.misc:3524

On 2014-06-02, Rich <rich@example.invalid> wrote:
> tdk <forum.tdk@squte.com> wrote:
>> >We'd lose our security certificate if we allowed pasting. It could leave us  
>> >open to a "brute force" attack.
>
>> It is of course ridiculous to think that brute forcing is done by  
>> copy-pasting (with JavaScript enabled!)
>
> But it looks like some "web-security best practices seminar" somewhere
> has begun to "teach" that allowing pasting is a security issue.  The
> question is, how do we stop it before it grows too far?

You can't.

Far too many stupidities are already engrained in the password nonsense. This
is just another.

-- 
Today is Sweetmorn, the 10th day of Confusion in the YOLD 3180
"I do not believe in revealed religion — I will have nothing to do with your
immortality; we are miserable enough in this life, without speculating on
another." Lord Byron, 1778-1824, letter to Rev. Francis Hodgson, 1811