iOS Privacy: Easily get a user's Apple ID password, just by asking

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by jsjohnst on Wednesday October 11, 2017 @01:22PM (#15451416)

So if you really were talking about the foreground app and not just covering now, then why does one need to make a fake keyboard!? That makes no sense at all.

[ Parent | on HN ]

Re:iOS Privacy: Easily get a user's Apple ID password, just ... by emmelaich on Wednesday October 11, 2017 @06:46PM (#15454214)

I was just making a more fundamental point (see my middle para) and decided to hang it off this thread rather than making it top level.

I didn't have a specific scenario in mind.

But to address your question ...

Say a user is reassured because he knows that only approved keyboard apps can accept passwords.

This malware app pops up a password prompt AND some images and input buttons that looks very much like a 'proper' keyboard.

The user enters his password.

Game over.

[ Parent | on HN ]