←back to thread

How Dropbox Hacks Your Mac

(applehelpwriter.com)
1037 points 8bitben | 1 comments | 09 Sep 16 15:52 UTC | HN request time: 0.203s | source
Show context
gruez ◴[09 Sep 16 16:41 UTC] No.12463849[source]▶
The fact that any application can spoof the os password prompt makes me wonder why they don't have a prominent feature to show the prompt is from the OS. On windows there is the secure desktop with the dimming effect.
replies(6): >>12463913 #>>12463935 #>>12463946 #>>12464205 #>>12464261 #>>12465995 #
pritambaral ◴[09 Sep 16 16:50 UTC] No.12463935[source]▶
Is the "secure desktop with dimming effect" not spoofable?
replies(3): >>12464096 #>>12464194 #>>12464260 #
1. sbarre ◴[09 Sep 16 17:06 UTC] No.12464096[source]▶
It probably is, but it would be near-impossible for a respectable company to claim that they weren't specifically trying to spoof it.

With the current OS X password prompt being a benign looking window, Dropbox (or others) can easily say they're just "following standard UI patterns" or something like that.