Hacker News Reader

Comment by amelius | Hacker News Reader

Since many websites already implement their own input fields, I see one solution: implement the entire keyboard in JavaScript

View on HN

The default keyboards are inflexible for so many reasonable use cases that I would actually consider this unironically.

What use case is there for (able-bodied) people where a websites own implementation of an on-screen keyboard would improve anything?

I think this may have been the result of banking malware (e.g. Zeus back in the day) which was hooking OS calls to capture keyboard input and steal passwords. I'm not sure whether the on-screen keyboards would be vulnerable in other ways though.

I have had to use a online banking site (from a very, very big global corporate bank) which implemented a keyboard in the (Desktop) browser which you had to click each letter with a mouse to type out your password (in the name of security, presumably).

BNP Paribas? It's what I have to use to enter my password (which is only 6 char long, no choice there)

Indeed BNP Paris does that for the Pin number, so it's only numbers you have to type.

It has been there or a long time, so I kinda consider it a remnant of the old battle against keylogger, since the number position changes. It does seem outdated now, and I'm unsure if it's still useful compared to all the other possible checks they could implement.

It's not my PIN number, it's used as a password to access on-line banking services. But I agree that it look like it's design to defend against keylogger; I don't know how efficient it is.

Reply on news.ycombinator.com