Re:I lost €4k in a Facebook scam
by gridlockd on Monday September 14, 2020 @10:12AM
(#24470359)
It's possible to do "trusted UI" on iOS/Android by opening a browser window that shows you're actually logging into facebook-dot-com. That still wouldn't prevent these scams from working because users don't necessarily know how to tell the difference between "trusted UI" and "scam UI".
[ Parent
| on HN ]
Re:I lost €4k in a Facebook scam
by londons_explore on Monday September 14, 2020 @10:46AM
(#24470769)
Except it isn't... Because the app can just show a UI that looks like a browser window, and there's no way for the user to know.
If you open a browser window, there is going to be some things that can't be faked 100% accurately, e.g. on iOS there will be a link back to the app at the top left, there is going to be an animation, and so on.
It could be faked 95% accurately, but that's moot, because like I said, the user hasn't necessarily learned what "trusted UI" is in the first place.
https://news.ycombinator.com/item?id=24470530
Looks like it was a real Facebook login webview.
...which is different from a browser window, running inside the actual system browser.
The difference may of course be subtle, but even obviously fake logins can work on the untrained eye.
Re:I lost €4k in a Facebook scam
by donmcronald on Monday September 14, 2020 @05:02PM
(#24475111)
Like this old trick.