Re:The Line of Death
by kibwen on Saturday January 14, 2017 @06:01PM
(#13401128)
I've never heard the term "line of death" used to describe this before, but this concept is exactly why I've sadly convinced myself that fully chromeless browsers are a bad idea. Unless there were some sort of spoofless hardware indicator that a given UI element was being displayed by the browser, I suppose... but that sort of defeats the purpose.
[ Parent
| on HN ]
How about, in the same way that some banks allow you to upload an image that they can then show you to prove you're talking to the same party that you've talked to previously, a chromeless browser could ask you to "draw" or supply an image for trusted actions. This "badge of trust" could then be show inside any dialog that asks the user to perform any action that you would not want a website to fake. It would of course be important that untrusted website content is never able to read these pixels.
This is essentially inverting the relationship, by inserting a "zone of life" inside the "zone of death".
Re:The Line of Death
by inconclusive on Saturday January 14, 2017 @09:48PM
(#13402032)
What's a chromeless browser?
Re:The Line of Death
by userbinator on Sunday January 15, 2017 @12:12AM
(#13402468)
Something like this: http://techcrunch.com/2014/11/28/yandex-brwoser-concept/
Discussed at https://news.ycombinator.com/item?id=8670503