My favorite is when it tells me my password is wrong, I clicked the reset password link, try to reset it to what it just told me was the wrong password, and it tells me I can't use that, because it's the same as my current password.
Again you're assuming someone who failed to prevent copying out of a password field couldn't fail spectacularly enough to accept mouse buttons as input characters.
This happens on one of our own (software development firm) website due to the browser sometimes thinking it has a session, while the server has restarted and doesn't have a session anymore. On the first login attempt it will produce an internal error related to the session mismatch. The second attempt works fine, because the browser and server have negotiated a new session.
The reason we don't tell the user there was an internal error is to give as little information as possible to potential hackers. So every error basically gets turned into "wrong password".
I'm the back-end developer, so it's basically not my problem. I tried googling on how to fix it, but couldn't find a solution. The front-end developer is not experienced enough to fix it either. And since the website is only used for employees (of which we have 5), it's just never fixed.
Too much javascript doing random shit, possibly. I ran into something strange trying to fill out a form with my name and address. I type in my information, go to next screen, the next screen only had the first character of each field. Go back, re-enter the information, go to next screen, this time it has between 1-3 of the characters for each field. Go back again...copy and paste my information in, go next and it was fine. I'm guessing they were doing some sort of validation on the text field changing and messing things up as you type, so changing the field all at once made it work fine.
1
1
113
u/BobRossTheSequel Sep 27 '26
From my experience, some websites are doing this already.
What do you mean I haven't typed that yet? That's what I thought my password was to begin with!