The passkey pop-ups which are indistinguishable from javascript pop-ups are a pa... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		musicale 9 months ago \| parent \| context \| favorite \| on: Can you trust that permission pop-up on macOS? The passkey pop-ups which are indistinguishable from javascript pop-ups are a particularly egregious security mistake.

sureIy 9 months ago [–]

What's the problem here? Javascript popups can't read your fingerprint so what would be the endgame of a fake passkey popup?

BetaMechazawa 9 months ago | | [–]

timeout after 10 seconds "fingerprint can't be read, please enter password"

Klonoar 9 months ago | | [–]

They’re saying they shouldn’t look similar because it conveys authority otherwise.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact