5 ms·

Interesting. iOS Safari seems to force the address bar to stay visible on this page.

by doctorless 8y ago

vegizombie 8y ago
Firefox for android keeps the bar there too.
- clusmore 8y ago
  Just to be clear, you're referring to real Firefox address bar (pointing to TFA), not the fake Chrome address bar (pointing to hsbc.com). So yes, in this case Firefox has (accidentally?) somewhat thwarted this attack vector.
  - tty2300 8y ago
    It certainly looks accidental. It hides on scroll on other pages but this one causes it to half hide and then it pops back up again.
    - grahamburger 8y ago
      I noticed this as well. I'm wondering if FF is smart enough to always show it's own title bar if a CSS element is pinned to the top of the viewport? Gotta do more testing ...
- jamesfisher 8y ago
  Interesting! So it does. However Firefox does hide the URL bar on other pages! I'll try to figure out what the logic is in Firefox, and whether there's an equivalent trick to hide the URL bar ...
- giancarlostoro 8y ago
  That is a setting you can enable or disable. I think default is to always show title bar.
- Zitrax 8y ago
  Opera mobile also keeps it.
gruez 8y ago
Also the scrolling feels "weird". Kinda like when you're on an amp page (although I think they fixed that now).
- sbr464 8y ago
  It’s missing a css property that enables the throw feeling. https://css-tricks.com/snippets/css/momentum-scrolling-on-ios-overflow-elements/ https://css-tricks.com/snippets/css/momentum-scrolling-on-io...
- saagarjha 8y ago
  That’s because the site messes with the scrolling in an attempt to prevent the top chrome to not come back, which unfortunately (or fortunately?) doesn’t do anything because Safari refuses to hide it.
  - deleted 8y ago
    [deleted]
- oefrha 8y ago
  Yeah, the scrolling is so janky on the page, I thought my iPad wasn’t properly responding to multitouch input for a moment... Then I opened the HN discussion and smooth, buttery scrolling (tm) was back. Lesson: don’t hijack scrolling behavior, it’s awful. (Very smart hack though.)
steve_taylor 8y ago
> With a little more effort, the page could detect which browser it’s in, and forge an inception bar for that browser. It’s just a proof of concept, focusing on one browser in one operating system. It would be interesting to see how well this could be done on iOS. The real host name is always shown at the top of the page, so it’s not going to be perfect.
- chii 8y ago
  > so it’s not going to be perfect. doens't have to be perfect - just good enough to fool some people.
burlesona 8y ago
Safari doesn’t hide the url bar when you employ the “scroll jail” technique he described. It also doesn’t feel right scrolling because he omitted the css property for inertial scrolling in his “scroll jail.”
leowoo91 8y ago
For me, it did hide at landscape hold..

Interesting. iOS Safari seems to force the address bar to stay visible on this page.

vegizombie 8y ago

Firefox for android keeps the bar there too.

clusmore 8y ago
Just to be clear, you're referring to real Firefox address bar (pointing to TFA), not the fake Chrome address bar (pointing to hsbc.com). So yes, in this case Firefox has (accidentally?) somewhat thwarted this attack vector.
- tty2300 8y ago
  It certainly looks accidental. It hides on scroll on other pages but this one causes it to half hide and then it pops back up again.
  - grahamburger 8y ago
    I noticed this as well. I'm wondering if FF is smart enough to always show it's own title bar if a CSS element is pinned to the top of the viewport? Gotta do more testing ...
jamesfisher 8y ago
Interesting! So it does. However Firefox does hide the URL bar on other pages! I'll try to figure out what the logic is in Firefox, and whether there's an equivalent trick to hide the URL bar ...
giancarlostoro 8y ago
That is a setting you can enable or disable. I think default is to always show title bar.
Zitrax 8y ago
Opera mobile also keeps it.

gruez 8y ago

Also the scrolling feels "weird". Kinda like when you're on an amp page (although I think they fixed that now).

sbr464 8y ago
It’s missing a css property that enables the throw feeling. https://css-tricks.com/snippets/css/momentum-scrolling-on-ios-overflow-elements/ https://css-tricks.com/snippets/css/momentum-scrolling-on-io...
saagarjha 8y ago
That’s because the site messes with the scrolling in an attempt to prevent the top chrome to not come back, which unfortunately (or fortunately?) doesn’t do anything because Safari refuses to hide it.
- deleted 8y ago
  [deleted]
oefrha 8y ago
Yeah, the scrolling is so janky on the page, I thought my iPad wasn’t properly responding to multitouch input for a moment... Then I opened the HN discussion and smooth, buttery scrolling (tm) was back. Lesson: don’t hijack scrolling behavior, it’s awful. (Very smart hack though.)

steve_taylor 8y ago

> With a little more effort, the page could detect which browser it’s in, and forge an inception bar for that browser. It’s just a proof of concept, focusing on one browser in one operating system. It would be interesting to see how well this could be done on iOS. The real host name is always shown at the top of the page, so it’s not going to be perfect.

chii 8y ago
> so it’s not going to be perfect. doens't have to be perfect - just good enough to fool some people.

burlesona 8y ago

Safari doesn’t hide the url bar when you employ the “scroll jail” technique he described. It also doesn’t feel right scrolling because he omitted the css property for inertial scrolling in his “scroll jail.”

leowoo91 8y ago

For me, it did hide at landscape hold..