Live data from Hacker News

The inception bar: a new phishing method

jameshfisher.com

11–20 of 238 posts

Re: The inception bar: a new phishing method

#11
post #8

Interesting. iOS Safari seems to force the address bar to stay visible on this page.

Also the scrolling feels "weird". Kinda like when you're on an amp page (although I think they fixed that now).

It’s missing a css property that enables the throw feeling.

https://css-tricks.com/snippets/css/momentum-scrolling-on-io...

Re: The inception bar: a new phishing method

#12
post #8

Interesting. iOS Safari seems to force the address bar to stay visible on this page.

Also the scrolling feels "weird". Kinda like when you're on an amp page (although I think they fixed that now).

That’s because the site messes with the scrolling in an attempt to prevent the top chrome to not come back, which unfortunately (or fortunately?) doesn’t do anything because Safari refuses to hide it.

Re: The inception bar: a new phishing method

#17

Interesting. iOS Safari seems to force the address bar to stay visible on this page.

> With a little more effort, the page could detect which browser it’s in, and forge an inception bar for that browser.

It’s just a proof of concept, focusing on one browser in one operating system. It would be interesting to see how well this could be done on iOS. The real host name is always shown at the top of the page, so it’s not going to be perfect.

Re: The inception bar: a new phishing method

#18
post #8

Earlier quoted context omitted.

Also the scrolling feels "weird". Kinda like when you're on an amp page (although I think they fixed that now).

That’s because the site messes with the scrolling in an attempt to prevent the top chrome to not come back, which unfortunately (or fortunately?) doesn’t do anything because Safari refuses to hide it.

[deleted]
Post reply on HN