Hacker News Reader

Comment by iriche | Hacker News Reader

We have disabled CTRL+C, CTRL+V on our site, just due to this, so users really need to validate there email.

EDIT: Just to clarify since someone took up a example with no paste on password. We just have this function on the email-field.

View on HN

I hate you.

It's a lazy naive "solution" that makes my life harder for no good reason. Take effort to implement good validation and recovery:

1. Use client-side validation (HTML5 field ideally) and look up the domain part. Offer "did you mean" suggestion for typos of very popular domains.

2. As long as user is signed in allow them to change e-mail post registration (e.g. "We've sent e-mail to xxtypo@geemail.com and haven't received confirmation. [Change e-mail address]")

That is certainly ONE way of making me hate your site (and never use it if I can avoid it).

Arguably even worse is TalkTalk's login form, which disables pasting into the password field. So I can't just copy my password there from a locket, I have to retype it. As a result I have chosen a stupidly easy-to-break password, just so I have a chance of typing it correctly, unlike the "gr2@tGig^monE"-stype passwords I otherwise use.

And yes, I know, Correct Horse Battery Staple. That's all very well until you have to register on a web-site that restricts passwords to 8-12 characters.

A surprising number of websites explicitly require easy passwords (though they call it something different). If you want a mix of uppercase, lowercase and numbers, with a length of 8-12, you're going to get Welcome01.

A pox upon you. I have Greasemonkey scripts for this kind of annoyance, as well as the autocomplete=off bullshit that prevents my perfectly safe password manager from improving security by not having to go through the clipboard. Despite my workarounds, every time I see this kind of misbehaviour, I hate you, your website and your company a little more.

Did I say I did it on password field or at login?

EDIT: Edited my main commented due to a comment regarding password fields blocking CTRL+V

More than once I have completely lost interest in a product/service firmly on the base of these kinds of 'fixes'.

It seems like if I'm restricted by this right now (hell, I type my email in roughly 6-7 times a day, with 100% success!) what level of 'fixes' will I experience when I am inside?

So glad this pref exists in Firefox, for just this reason:

https://developer.mozilla.org/en-US/docs/Mozilla/Preferences...

Thanks, useful. I'm sure it'll break copy/paste in Google Docs, but that's a small price to way.

I hope at the very least that you're at least doing it for the specific email fields rather than messing with password copy-and-paste.