3 ms·
It looks like the android app uses a custom browser to render the third-party login pages, putting them in a position to trivially grab your password. I can't
by philsnow 13y ago
It looks like the android app uses a custom browser to render the third-party login pages, putting them in a position to trivially grab your password.
I can't think of a reason to have done this. Sure, I would have liked for the "log in with Google" button to pop up the system account chooser, but at the very least, just fire off an intent and let the user's browser of choice take care of it.
- randallu 13y agoThat's a rough flow though. Assuming the external browser finishes itself when the auth page calls window.close you still have a bunch of ugly activity launches in between; you probably see the last thing you were browsing for a few hundred milliseconds, etc. Not very polished.