> fake Captcha pops up in Chrome which actually enables push notifications Wow, this sounds like a classic clickjacking vulnerability. That’s still possible on

> fake Captcha pops up in Chrome which actually enables push notifications Wow, this sounds like a classic clickjacking vulnerability. That’s still possible on modern[ish] Android? Definitely interested in your write up.