4 ms·
Prior to iOS 11, the OS would quite often ask for your Apple ID username/password by showing a popup regardless of whether you were in another app or Springboar
by tolien 9y ago
Prior to iOS 11, the OS would quite often ask for your Apple ID username/password by showing a popup regardless of whether you were in another app or Springboard.
Since you don’t know what the hell’s prompted that request, it was noted that this opens a vector for phishing [1] and it conditions users to blindly put their password into anything that asks.
I wonder if this is an attempt to fix that gone wrong.
1: https://9to5mac.com/2017/10/10/psa-apple-id-phishing-attempt/ https://9to5mac.com/2017/10/10/psa-apple-id-phishing-attempt...
- snuxoll 9y agoNot a great solution, but if iOS itself is asking for your password pressing the home button when the dialog is up will be a nop instead of returning you to the home screen.
- deleted 9y ago[deleted]
- wonderous 9y agoPlease clarify if “nop” is a typo, slang, etc.
- quesera 9y agoAssembly language instruction mnemonic for "no operation", traditionally capitalized. See also NOOP, NOPR, etc.
- deleted 9y ago[deleted]
- samschooler 9y agoI think he was meaning nop in the sense of "no operation." Its a term originating from an assembly language instruction meaning "do nothing." Basically, if you press the home button; nothing happens.
- tomc1985 9y agoWhy can't people google things anymore?
- Finnucane 9y agoWhat;s the National Organic Program got to do with it?
- tolien 9y agoYeah, that was the suggestion I saw people make when Marco Arment mentioned [1] that the popup was bad too. As you say, it’s not great but it seems better than nixing the popup entirely. 1: https://twitter.com/marcoarment/status/841359803192561665 https://twitter.com/marcoarment/status/841359803192561665
- rorosaurus 9y agoIf I remember correctly, people at the time were suggesting Apple simply had their own, private version of the popup which indicated it's authenticity via colors or a badge. I honestly feel like that might have been good enough, especially if you change the other, public popup dialogs to warn not to enter password information.
- tolien 9y agoI guess the corollary to that is Dropbox faking the macOS credential popup [1] - anything you can see can be cloned. If they'd just fixed it so it didn't appear so damned often and without any apparent cause (I get that it was probably triggered by some background process trying to sync or something - those should really have triggered a "Open Settings to confirm your Apple ID" sort of message, rather than a direct request for credentials), that might have been enough. 1: https://www.reddit.com/r/privacy/comments/51wqhd/dropbox_fakes_the_osx_login_dialog_to_cache_your/ https://www.reddit.com/r/privacy/comments/51wqhd/dropbox_fak...
- tomc1985 9y agoMan I effing hate this feature. Makes one feel like they're in a third world country -- "IDENTIFICATION PLEASE" all the damn time
- dreamfactored 9y agoiOS 11 still does this (unless I'm hacked)
- runjake 9y ago> Prior to iOS 11... I don't think the issue went away with iOS 11. It's still happening in iOS 11 for myself on an iPhone X as well as some of my colleagues.
- tolien 9y agoWeird, I can't remember seeing it for ages (my normal-use phone has the beta profile, so it's run iOS 11 since WWDC).
- eric_h 9y agoI had to put it in a couple of times the first day I got my iPhone X (2+ weeks ago), but I do not believe I've had to enter it again since, having done several actions that would require Apple ID authentication since then.
- runjake 9y agoI think the issue has more to do with something going on with iCloud than iOS versions.