News for hackers. Stuff that matters.

A comment on Can You Really Trust That Permission Pop-Up on macOS? (CVE-2025-31250). Parent comment

Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by musicale on Monday May 12, 2025 @10:18PM (#43969164)
The passkey pop-ups which are indistinguishable from javascript pop-ups are a particularly egregious security mistake.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by sureIy on Tuesday May 13, 2025 @12:05AM (#43969565)
What's the problem here? Javascript popups can't read your fingerprint so what would be the endgame of a fake passkey popup?
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by Klonoar on Tuesday May 13, 2025 @02:47AM (#43970178)
They’re saying they shouldn’t look similar because it conveys authority otherwise.
[ Parent | on HN ]
Re:Can You Really Trust That Permission Pop-Up on macOS? (CV... by BetaMechazawa on Tuesday May 13, 2025 @03:34AM (#43970471)
timeout after 10 seconds "fingerprint can't be read, please enter password"
[ Parent | on HN ]