Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I once wrote an email to Steve Jobs, saying that operating systems like MacOS and iOS should have a secret phrase or icon that they show to you whenever they show a system-level security dialog. (And of course implement the same restrictions on screenshots of that dialog as they do for movies.)

Because otherwise, an app can totally fake the interface of a security dialog. The only way you know, these days, is that password managers and cookie jars work with the "approved" sites, but they can simply show you a site that doesn't require those, and then fool you into entering your passwords!

Steve never replied to me. And Apple never implemented it.



Fun fact, the Spanish word for password, "contraseña", originally implied this behaviour as "seña" —> "contraseña" ("sign" —> "countersign").




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: