4 ms·
> if you are building an unlock mechanism the first question you need to ask is how you build a UI which clearly communicates to a user that they are likely giv
by cmg 5y ago
> if you are building an unlock mechanism the first question you need to ask is how you build a UI which clearly communicates to a user that they are likely giving control of all of their data, location/camera/microphone, etc. to whatever they're installing.
Facebook puts a large "Stop!" warning in the browser console when you try to open developer tools with a link to https://www.facebook.com/selfxss https://www.facebook.com/selfxss. I'd be really curious to see if that's helped to stop such attacks on their side.
Full text: "This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or "hack" someone's account, it is a scam and will give them access to your Facebook account."
- acdha 5y agoThat’s an interesting question: I’d love to know how effective that’s been.
- snowwrestler 5y agoFacebook themselves convinced teenagers to side-load an iOS app that used Facebook’s enterprise cert to circumvent Apple’s privacy protections. They got caught and Apple revoked the cert, which broke all their internal iOS apps. If Facebook is willing to fool kids into giving up their privacy via side-loading, you can imagine why Apple is nervous about how things would go if anyone could easily do so.
- alisonkisk 5y agoApple lets Facebook run on iOS.
- eecc 5y agoIn a sandbox, and gradually stripping it of its privacy-invading features, while alerting users of the amount of tracking information it collects.
- pnexk 5y agoDiscord does the same when you open the electron inspect element panel with F12. Wonder how much that's helped as well