Chase.com is one of the worst. The desktop version of the site does all sorts of browser fingerprinting with javascript. It does things like tries opening up websockets to random local ports, and stuff like that.
I had to just throw up my hands and do all of my access to chase.com through a sandboxed browser profile, where I could automate logins.
> Chase.com is one of the worst. The desktop version of the site does all sorts of browser fingerprinting with javascript. It does things like tries opening up websockets to random local ports, and stuff like that.
I'm not fond of this, but what does it have to do with passwords? I (reluctantly) use Chase's online banking on the desktop, and it lets me paste passwords.
For example, my bank's app don't let you paste passwords. I have a strong random password which basically means I can't access it from my phone...