trans and queer lesbian just trying this thing out
~♡~
19 - gemini - US
english, toki pona
~♡~
i maintain @precious-tiny-things
~♡~
letterboxd | storygraph | backloggd
the vulnerability only exists if you go into settings and manually turn on a setting that says "warning this might let someone hijack your passwords"
yk this makes total sense and i figure there isnt any way to do password autofill securely, but also, cmon man. i just want my stupid thinking sand box to be marginally more pleasant to use. and then y'all fuckers have to ruin it with ur nefarious intentions.
ah my favorite type of vulnerability: "we are dealing with a 20+-year-old standard sorry"
yeah i literally always turn that shit off, why would i want it to log me in to random pages without any interaction from me? it was a bad idea when lastpass did it and it's still a bad idea today
Hmm, I wonder about 1Password and other auto-filling password tools for this as well.
1Password at least does allow you to tell it to automatically sign in, except for specific allowlisted "single sign on" vendors like Google/Facebook/etc
