News for hackers. Stuff that matters.

A comment on Apple's 'incredibly private' Safari is not so private in Europe. Parent comment

Re:Apple's 'incredibly private' Safari is not so private in ... by masfuerte on Wednesday May 01, 2024 @03:50PM (#40228464)
Where do you get "affirmatively acts to proceed with the install"? The original advisory suggests that any website can fire off these marketplace requests in response to any user action.
[ Parent | on HN ]
Re:Apple's 'incredibly private' Safari is not so private in ... by pulisse on Wednesday May 01, 2024 @04:16PM (#40228789)
Not "any user action". The user has to click the link. The fact that a link can be styled to look like anything isn't very damning.
[ Parent | on HN ]
Re:Apple's 'incredibly private' Safari is not so private in ... by masfuerte on Wednesday May 01, 2024 @04:41PM (#40229116)
According to the advisory the user can click on a button and the event handler issues the request. There isn't a link. The user has no indication of what's going to happen beyond whatever the page chooses to tell them.
[ Parent | on HN ]