iOS Privacy: Easily get a user's Apple ID password, just by asking

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by emmelaich on Wednesday October 11, 2017 @03:18AM (#15447846)

I am only talking about what the app does when it is the foreground app. I should have addressed that in the previous comment.

It's not a sidetrack, because that's what the actual article is about.

[ Parent | on HN ]

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by jsjohnst on Wednesday October 11, 2017 @01:22PM (#15451416)

So if you really were talking about the foreground app and not just covering now, then why does one need to make a fake keyboard!? That makes no sense at all.

[ Parent | on HN ]

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by emmelaich on Wednesday October 11, 2017 @06:46PM (#15454214)

I was just making a more fundamental point (see my middle para) and decided to hang it off this thread rather than making it top level.

I didn't have a specific scenario in mind.

But to address your question ...

Say a user is reassured because he knows that only approved keyboard apps can accept passwords.

This malware app pops up a password prompt AND some images and input buttons that looks very much like a 'proper' keyboard.

The user enters his password.

Game over.

[ Parent | on HN ]