3 ms·
Perhaps smartphones with app stores need an OS-level keychain of sorts? You could then teach users to only give passwords via the proper OS interface. (One whi
by roc 17y ago
Perhaps smartphones with app stores need an OS-level keychain of sorts?
You could then teach users to only give passwords via the proper OS interface. (One which would be able to display some sort of 'trust phrase' established earlier by the user.)
If the phishing app doesn't collect and retain your usernames/passwords directly, risk is mitigated.
It wouldn't hurt to prominently display certified sources either. Some sort of interface cue that the App you're downloading is verified to have been signed by the same people who run the site it's trying to access.
- buster 17y agoI haven't acutally read what those application do in detail, but afaik apps cannot read data from other apps (that is, it's not possible for a 3rd party app to read the credit card information you entered in another app, atleast not without you granting it the permission to do so). So, i suspect those were apps that pretended to be official (so, yes, phishing apps ;) ). Just wanted to clarify :)