4 ms·
>routinely make it so difficult to determine what's legit from what's fake. Like the amount of times on my phone where I get prompted for a username and passwo
by basch 4y ago
>routinely make it so difficult to determine what's legit from what's fake.
Like the amount of times on my phone where I get prompted for a username and password different from the app im in (to make some kind of connection) but then suppress the url from visibility. An astoundingly poor design choice that has proliferated into every single variant of that interface design flow.
- cyrusatjam 4y agoNot to mention, the app you're in can inject JS into the page it renders. Best practice is to open in your default browser and then allow the deeplink in the callback_uri to return you back to the original app