4 ms·

Reeaally? So, is Chrome now filtering the internet to catch you entering your CC number to some vague service online? Because that's what we're talking about.

Reeaally? So, is Chrome now filtering the internet to catch you entering your CC number to some vague service online? Because that's what we're talking about. Shopping (for an in app purchase, but still) online, in a browser. I wonder how Google checked if Amazon is PCI compliant.. If you're entering your CC everywhere that's not something Google can (or should - no need for a nanny..) fix. There's no way in my world that Google _could_ be liable for these kind of things. You're trying to understand their motivation for banning alternative payment methods. We both have a theory. Mine is 'greed', yours is 'protecting the user and protecting the company against evil worldwide'. I really think you're giving them too much credit here.

rmrfrmrf 13y ago
There's a very clear difference between native apps and web apps in my mind. EDIT: I should make very clear to non-developers out there that, with a native app, you're able to display a web browser without a URL bar or any other UI, which makes it exceedingly easy to trick people into thinking that they're at an official PayPal site or other shenanigans that the unscrupulous dev wants to try. More information: https://developer.android.com/reference/android/webkit/WebView.html https://developer.android.com/reference/android/webkit/WebVi...
- ceejayoz 13y ago
  > EDIT: I should make very clear to non-developers out there that, with a native app, you're able to display a web browser without a URL bar or any other UI, which makes it exceedingly easy to trick people into thinking that they're at an official PayPal site or other shenanigans that the unscrupulous dev wants to try. Nothing's stopping a non-standard browser (Opera, Firefox, etc.) from doing that, and they're permitted on Android. Hell, you could do it on iOS, too.
  - rmrfrmrf 13y ago
    are you trying to miss the point?
    - ceejayoz 13y ago
      Are you? A custom browser can be designed to quietly send people accessing PayPal off to a phishing site just as easily as an app integrating a PayPal payment method. If Google's going to use that sort of attack as a reason to prevent non-IAP payments, they should be banning non-Google browsers too.

rmrfrmrf 13y ago

There's a very clear difference between native apps and web apps in my mind. EDIT: I should make very clear to non-developers out there that, with a native app, you're able to display a web browser without a URL bar or any other UI, which makes it exceedingly easy to trick people into thinking that they're at an official PayPal site or other shenanigans that the unscrupulous dev wants to try. More information: https://developer.android.com/reference/android/webkit/WebView.html https://developer.android.com/reference/android/webkit/WebVi...

ceejayoz 13y ago
> EDIT: I should make very clear to non-developers out there that, with a native app, you're able to display a web browser without a URL bar or any other UI, which makes it exceedingly easy to trick people into thinking that they're at an official PayPal site or other shenanigans that the unscrupulous dev wants to try. Nothing's stopping a non-standard browser (Opera, Firefox, etc.) from doing that, and they're permitted on Android. Hell, you could do it on iOS, too.
- rmrfrmrf 13y ago
  are you trying to miss the point?
  - ceejayoz 13y ago
    Are you? A custom browser can be designed to quietly send people accessing PayPal off to a phishing site just as easily as an app integrating a PayPal payment method. If Google's going to use that sort of attack as a reason to prevent non-IAP payments, they should be banning non-Google browsers too.