4 ms·
Isn't there any way that browsers/OS could signal "this dialog you're seeing right there is from us and not from the website you're visiting"? Most people know
by cprecioso 10y ago
Isn't there any way that browsers/OS could signal "this dialog you're seeing right there is from us and not from the website you're visiting"? Most people know to look for the lock icon in sensitive pages, so it could be extended to that as well.
- Cpoll 10y agoIt would have to appear outside the view-port. alert('blah') works like this in most browsers. In Chrome, it's subtle (it covers up your bookmark bar); if you're not paying attention, it'd be easy to fall for a spoof. There are times when I've clicked on a mock-up (trying to close it) thinking it was an actual window.
- cprecioso 10y agoWhy is it subtle, and not blatant? Regular people does not / will not notice things like that unless it's in-your-face obvious.
- angry-hacker 10y agoA lot of content is not from the sites you visit. Ads, often videos, things that your cdn hosts etc. You can use css to draw anything on the screen. Inside the viewport of course. The garbled text us clever but otherwise it's just a typical scam to make you install Spyware. Heck, majority of ad networks run these things. You have 5 viruses, download this thing.
- cprecioso 10y ago> A lot of content is not from the sites you visit. Ads, often videos, things that your cdn hosts etc. Yes, that's why I'm asking about a way to unequivocally recognize that a dialog is from the browser, for example, drawing things completely outside the viewport (without overlapping it) or changing the browser chrome's colors.
- angry-hacker 10y agoMaybe something like Windows UAC alert then. Disable all the background and dim it.
- RugnirViking 10y ago> Disable all the background and dim it Surely this is trivial to reproduce with css in the webpage, and is in fact what the images show here