3 ms·

How could they prevent it?

• tgb 6y ago
  Ban apps that do that.
  • gruez 6y ago
    And how are they supposed to do that? If it's a fake login (aka phishing) page facebook wouldn't even know about it. The only effective way is dissuade consumers from entering their login credentials in-app, but even that's tricky because if it's a malicious app they could "fake" a web browser complete with a fake "address bar".
    • andybak 6y ago
      This is why "with a password manager" is a crucial part of the puzzle. You have to fail at several steps if you're entering your credentials in this scenario.
    • tgb 6y ago
      They're supposed to ban the legitimate apps, so as to not normalize the interface that leads to phishing attempts. Right now, it's totally encouraged by google to enter your login credentials by clicking "log in with google" at a random site and just typing into the fields presented to you.