3 ms·
Haven’t dug in their code, but my best guess is to get the user to trigger a “trusted” event which is needed for access to certain browser APIs such as clipboar
by omneity 3y ago
Haven’t dug in their code, but my best guess is to get the user to trigger a “trusted” event which is needed for access to certain browser APIs such as clipboard or audio.
Probably some fingerprinting trick.
The same is done by shady news websites which load a single sentence and ask you nonsensically to “Click to expand Article”.
- danShumway 3y agoMy hot take for a while has been that trusted events are bad UX design. Highlighting text on a page can be treated as a trusted event to trigger things like audio autoplay. It's a tricky problem to solve, and I guess it's technically better than nothing, but we really should be focusing on surfacing these permissions in a more user-understandable way. There's friction there -- we want to be able to go to Youtube and click a single button and have a video play. But stuff like video autoplay does not make sense to hide behind a user click that can be anywhere on the page or a keypress that can be basically anything at all. It's too easy of a bar to cross imo; it breaks certain applications and makes them less reliable, but also makes it far too easy to just have a popup banner with an X, and poof, now you have all the permissions you need.