6 ms·
Because every submission should have a pessimistic, cynical reply: I expect this to be used to its full potential by phishing sites. Aside from that: finally.
by dictum 13y ago
Because every submission should have a pessimistic, cynical reply: I expect this to be used to its full potential by phishing sites.
Aside from that: finally.
- stingraycharles 13y agoHow would that work, a full-screen emulation of safari in js?
- selectodude 13y agoI would think a full-screen emulation of a bank app or something. Phishing email sends you to a link that "opens" your bank app and asks you to sign in.
- dictum 13y agoIt would be trivial to imitate Mobile Safari's chrome with "actuallegitdomain.com" in the address bar instead of "actuallegitdomain.com.ooo.ag" or resorting to IDN tricks (since most browsers, and I think Mobile Safari too, show the xn--wh4t3v3r.com version).
- Mtinie 13y agoChristian Cantrell, from Adobe, demonstrated a similar phishing attack vector: https://www.youtube.com/watch?v=XQXFO9NNO8g https://www.youtube.com/watch?v=XQXFO9NNO8g "This won't end well..."