Public
- Public
- Network
- Groups
- Popular
- People

Conversation

Notices

Eric Shields | 🅜assTransitKrow (masstransitkrow@federation.ninetiesmysteri.es)'s status on Sunday, 29-Jan-2023 02:38:50 JST Eric Shields | 🅜assTransitKrow

Duuuuuuuuuuuude

RT: https://mastodon.km6g.us/@kevin/109766908578809142
In conversation Sunday, 29-Jan-2023 02:38:50 JST from federation.ninetiesmysteri.es permalink
Attachments
1. Kevin P. Fleming (@kevin@km6g.us)
  
  from Kevin P. Fleming
  
  Attached: 1 image In today's episode of 'website security theatre' we present the US Government's "TreasuryDirect" site. They don't just disable copy-and-paste into the password field, they disable *keyboard entry* into the password field. You are required to click buttons on this virtual keyboard in order to enter your password. Kudos to them for making high-entropy random passwords difficult to use! Oh, and the password is also case-insensitive, probably because implementing shift-key support in the virtual keyboard would have been too complex. #Password #SecurityTheatre

Feeds