News for hackers. Stuff that matters.
Re:The inception bar: a new phishing method by doctorless on Saturday April 27, 2019 @07:29PM (#19768293)
Interesting. iOS Safari seems to force the address bar to stay visible on this page.
Re:The inception bar: a new phishing method by gruez on Saturday April 27, 2019 @07:47PM (#19768393)
Also the scrolling feels "weird". Kinda like when you're on an amp page (although I think they fixed that now).
Re:The inception bar: a new phishing method by sbr464 on Saturday April 27, 2019 @07:52PM (#19768424)
It’s missing a css property that enables the throw feeling.

https://css-tricks.com/snippets/css/momentum-scrolling-on-io...

Re:The inception bar: a new phishing method by saagarjha on Saturday April 27, 2019 @07:54PM (#19768429)
That’s because the site messes with the scrolling in an attempt to prevent the top chrome to not come back, which unfortunately (or fortunately?) doesn’t do anything because Safari refuses to hide it.
Re:The inception bar: a new phishing method by oefrha on Sunday April 28, 2019 @05:18AM (#19770153)
Yeah, the scrolling is so janky on the page, I thought my iPad wasn’t properly responding to multitouch input for a moment... Then I opened the HN discussion and smooth, buttery scrolling (tm) was back. Lesson: don’t hijack scrolling behavior, it’s awful. (Very smart hack though.)
Re:The inception bar: a new phishing method by steve_taylor on Saturday April 27, 2019 @07:58PM (#19768453)
> With a little more effort, the page could detect which browser it’s in, and forge an inception bar for that browser.

It’s just a proof of concept, focusing on one browser in one operating system. It would be interesting to see how well this could be done on iOS. The real host name is always shown at the top of the page, so it’s not going to be perfect.

Re:The inception bar: a new phishing method by chii on Sunday April 28, 2019 @04:20AM (#19769994)
> so it’s not going to be perfect.

doens't have to be perfect - just good enough to fool some people.

Re:The inception bar: a new phishing method by vegizombie on Saturday April 27, 2019 @07:31PM (#19768312)
Firefox for android keeps the bar there too.
Re:The inception bar: a new phishing method by jamesfisher on Saturday April 27, 2019 @07:41PM (#19768363)
Interesting! So it does. However Firefox does hide the URL bar on other pages! I'll try to figure out what the logic is in Firefox, and whether there's an equivalent trick to hide the URL bar ...
Re:The inception bar: a new phishing method by clusmore on Saturday April 27, 2019 @07:39PM (#19768355)
Just to be clear, you're referring to real Firefox address bar (pointing to TFA), not the fake Chrome address bar (pointing to hsbc.com). So yes, in this case Firefox has (accidentally?) somewhat thwarted this attack vector.
Re:The inception bar: a new phishing method by tty2300 on Saturday April 27, 2019 @07:52PM (#19768420)
It certainly looks accidental. It hides on scroll on other pages but this one causes it to half hide and then it pops back up again.
Re:The inception bar: a new phishing method by grahamburger on Saturday April 27, 2019 @09:25PM (#19768717)
I noticed this as well. I'm wondering if FF is smart enough to always show it's own title bar if a CSS element is pinned to the top of the viewport? Gotta do more testing ...
Re:The inception bar: a new phishing method by giancarlostoro on Saturday April 27, 2019 @09:21PM (#19768708)
That is a setting you can enable or disable. I think default is to always show title bar.
Re:The inception bar: a new phishing method by Zitrax on Sunday April 28, 2019 @03:17AM (#19769827)
Opera mobile also keeps it.
Re:The inception bar: a new phishing method by burlesona on Saturday April 27, 2019 @10:59PM (#19769039)
Safari doesn’t hide the url bar when you employ the “scroll jail” technique he described. It also doesn’t feel right scrolling because he omitted the css property for inertial scrolling in his “scroll jail.”
Re:The inception bar: a new phishing method by leowoo91 on Sunday April 28, 2019 @04:57PM (#19773628)
For me, it did hide at landscape hold..