How get a users appleid password? Just ask for it.

[Ries]

Could fool me, it looks really authentic.

https://krausefx.com/blog/ios-priva...et-the-users-apple-id-password-just-by-asking

 

[yanki01]

what? i'm not even going to click that link.

 

[WolfSnap]

That bugged me about MacOS too. There’s no way to 100% distinguish real system prompts from spoofs.
[doublepost=1507666373][/doublepost]

what? i'm not even going to click that link.

It’s a blog article. Worth a read.

 

[LordQ]

Damn, this article should be more widespread!

 

[yanki01]

That bugged me about MacOS too. There’s no way to 100% distinguish real system prompts from spoofs.
[doublepost=1507666373][/doublepost]
It’s a blog article. Worth a read.

making sure it wasn't spam so glad someone else took the bait before i did. was a good read. thanks and eye opening.

 

[macfacts]

what? i'm not even going to click that link.

The link shows a dev can just make up his own dialog box that looks like it is from Apple and ask for password.

 

[Suckfest 9001]

Keep in mind that the popups with the your Apple ID email on them aren't possible.

 

[Sir Ruben]

Damn I remember getting two password prompts quite close together a few days ago and for the life of me I can't remember what I was doing at the time. Just I always do, I quickly hammered in my password to get the box out of the way and carried on what I was doing.

 

[Phil A.]

Mod Note
There is a news article about this issue - please continue the conversation in there