Re:The inception bar: a new phishing method
by walrus01 on Saturday April 27, 2019 @10:27PM
(#19768909)
I have an unquantified theory that the number of users that can distinguish between a Windows 7/8/10 dialog box that is presented directly by the operating system, versus as an image inside a browser coming from external http/https server, is diminishing greatly every year.
[ Parent
| on HN ]
Last time I was in Davis CA, someone was trying to get me to sign up to their charity. They had an iPad, and were adamant that the padlock on the screen proved it was secure.
I couldn’t convince them that it was just a picture, and that I could fake it if I wanted to.
Re:The inception bar: a new phishing method
by sandworm101 on Saturday April 27, 2019 @11:30PM
(#19769160)
Except all the colorblind people who have altered their system defaults enough that anything internal to the browser will look very out of place.
Re:The inception bar: a new phishing method
by Terretta on Sunday April 28, 2019 @09:05AM
(#19770947)
You could always try pulling their system colors in through CSS:
Re:The inception bar: a new phishing method
by saagarjha on Saturday April 27, 2019 @11:48PM
(#19769227)
Having the entire web be unaccessible is a somewhat poor compromise, though…
Re:The inception bar: a new phishing method
by benj111 on Sunday April 28, 2019 @02:27AM
(#19769684)
Or Linux users.
Re:The inception bar: a new phishing method
by washadjeffmad on Sunday April 28, 2019 @09:38AM
(#19771099)
Which have a lower overall usage of the proprietary chrome browser, as well.
Firefox is the pre-install default for most distros, and only Chromium is provided in default repos.
They're also significantly more likely to use some form of ad and JS blocking.
So until the appearance changes based on the UA and system theme (and maybe can read bookmarks and plugins), this trick mostly affects mobile Chrome users.