News for hackers. Stuff that matters.

A comment on iOS Privacy: Easily get a user's Apple ID password, just by asking. Parent comment

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by jclardy on Tuesday October 10, 2017 @04:03PM (#15444906)
I'm specifically referring to iOS with the window fade. Of course the issue with it is that the user would have to notice the lack-of the effect on the fake popups (or apps trying to fake the users app icons/wallpaper)

My point is that literally anything would be better than a generic UIAlertController with a password field that exists today, I can fake one in literally ten seconds and have it be remotely triggered by a key on a server to pass through app review. Anything added would enhance security for users.

[ Parent | on HN ]
Re:iOS Privacy: Easily get a user's Apple ID password, just ... by pwinnski on Wednesday October 11, 2017 @10:27AM (#15450007)
I believe GP was saying that if there were a fade, it would take you "literally eleven seconds" to fake, and users would be no more likely to nice its presence or absence than they do phishing attempts on desktop computers.
[ Parent | on HN ]