News for hackers. Stuff that matters.

A comment on About the security content of iOS 14.7.1 and iPadOS 14.7.1. Parent comment

Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by cmg on Monday July 26, 2021 @06:09PM (#27966112)
> if you are building an unlock mechanism the first question you need to ask is how you build a UI which clearly communicates to a user that they are likely giving control of all of their data, location/camera/microphone, etc. to whatever they're installing.

Facebook puts a large "Stop!" warning in the browser console when you try to open developer tools with a link to https://www.facebook.com/selfxss. I'd be really curious to see if that's helped to stop such attacks on their side.

Full text: "This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or "hack" someone's account, it is a scam and will give them access to your Facebook account."

[ Parent | on HN ]
Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by snowwrestler on Monday July 26, 2021 @07:39PM (#27966879)
Facebook themselves convinced teenagers to side-load an iOS app that used Facebook’s enterprise cert to circumvent Apple’s privacy protections. They got caught and Apple revoked the cert, which broke all their internal iOS apps.

If Facebook is willing to fool kids into giving up their privacy via side-loading, you can imagine why Apple is nervous about how things would go if anyone could easily do so.

[ Parent | on HN ]
Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by alisonkisk on Tuesday July 27, 2021 @02:30AM (#27969291)
Apple lets Facebook run on iOS.
[ Parent | on HN ]
Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by eecc on Tuesday July 27, 2021 @03:29AM (#27969625)
In a sandbox, and gradually stripping it of its privacy-invading features, while alerting users of the amount of tracking information it collects.
[ Parent | on HN ]
Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by pnexk on Monday July 26, 2021 @07:40PM (#27966893)
Discord does the same when you open the electron inspect element panel with F12. Wonder how much that's helped as well
[ Parent | on HN ]
Re:About the security content of iOS 14.7.1 and iPadOS 14.7.1 by acdha on Monday July 26, 2021 @07:12PM (#27966636)
That’s an interesting question: I’d love to know how effective that’s been.
[ Parent | on HN ]