News for hackers. Stuff that matters.

A comment on iOS Privacy: Easily get a user's Apple ID password, just by asking. Parent comment

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by JD557 on Tuesday October 10, 2017 @09:41AM (#15441660)
>A perfect solution on iOS is to "minimize" the application so that the home screen is shown and then show the password prompt.

IIRC, this is similar to what happens in Windows since Vista. When you need to input your root password, all applications are minimized and you only see a dim wallpaper and the password prompt.

[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by icebraining on Tuesday October 10, 2017 @09:43AM (#15441673)
Right, but in Windows can't any application reproduce that behavior?
[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by vortico on Tuesday October 10, 2017 @09:48AM (#15441717)
Yup. And I'm sure there's some implementation of this in the form of a sketchy library.
[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by tyingq on Tuesday October 10, 2017 @09:54AM (#15441768)
Powershell script to do something similar: https://raw.githubusercontent.com/enigma0x3/Invoke-LoginProm...

Blog post with screenshots: http://enigma0x3.net/2015/01/21/phishing-for-credentials-if-...

There's probably some browser based equivalent somewhere too.

[ Parent | on HN ]