Live data from Hacker News

How Bluesky draws its logo on screenshots

timmarinin.net

441–450 of 478 posts

Re: How Bluesky draws its logo on screenshots

#441

Earlier quoted context omitted.

> I've yet to see someone saying "oh, I'm so glad my screenshot was blacked-out because I didn't realize I was in a banking app". It feels patronizing. Yes, this. Payment apps, government apps, IM communications. The other day I almost rooted my phone in anger trying to get around this, before pausing and realizing that this would only cause even more problems with those apps, thanks to remote attestation "features".…

On a similar note in terms of frustration, my bank ended up getting me to memorize my randomly-generated passwords twice because it blocked pasting. I guess it's to discourage writing them down in plaintext files, but I bet it just makes most people choose meaningful (and therefore weak and guessable) passwords.

I just ran into a signup/login flow that allows pasting of passwords to register but not to login.

Very frustrating.

Re: How Bluesky draws its logo on screenshots

#442

Earlier quoted context omitted.

> I've yet to see someone saying "oh, I'm so glad my screenshot was blacked-out because I didn't realize I was in a banking app". It feels patronizing. Yes, this. Payment apps, government apps, IM communications. The other day I almost rooted my phone in anger trying to get around this, before pausing and realizing that this would only cause even more problems with those apps, thanks to remote attestation "features".…

On a similar note in terms of frustration, my bank ended up getting me to memorize my randomly-generated passwords twice because it blocked pasting. I guess it's to discourage writing them down in plaintext files, but I bet it just makes most people choose meaningful (and therefore weak and guessable) passwords.

Same here. Luckily you can show two apps at the same time in Android so I just put the password manager above the bank's app.

Re: How Bluesky draws its logo on screenshots

#443

Earlier quoted context omitted.

> before pausing and realizing that this would only cause even more problems with those apps, In my view that's a feature, not a bug. I refuse to use services that break under "reasonable" conditions (non-chrome, ublock, no widevine, rooted, etc, etc).

I feel that too, but the practical reality is, many services happily exploit the leverage they have over me - I need them more than they need me. Banks are the canonical example - changing one is a huge hurdle, with consequences that can drag on for years. One by one, they're all ditching their websites (if they had one in the first place) in favor of apps. Even those with full-featured websites increasingly force yo…

Banks are the stereotypical example, but they are really not that hard to change, especially now that many decently reputable ones are entirely online. I've changed my bank in an afternoon.

Re: How Bluesky draws its logo on screenshots

#444

Earlier quoted context omitted.

OTOH, I might very well want to take a screenshot of my own bank details, transactions, or other sensitive information. It's annoying that my information is being protected from myself.

You might have amazing operational security but lots of other people don't, and they make noise, which means governments write laws meaning that banks have to refund them for fraud. So as much as a bank might agree with your stance on freedom of compute - they probably don't want to pay for it with actual money.

So in other words, we should make even more noise so that governments make laws requiring banking apps to support basic OS features including screenshots.

Re: How Bluesky draws its logo on screenshots

#445

Earlier quoted context omitted.

The OS could draw an ugly censoring block over the sensitive information. That would protect the user's privacy when needed but also prevent apps mis-using the feature like this.

It could. But the root problem is, there is no such thing as unqualified "sensitive information". The information is sensitive to someone , for some reason . The problem with screenshots manifests when the app and the user disagrees about whether the information is sensitive and who has the right to control it. The immediate technical problem is that OSes allow apps to declare what is "sensitive", and then follow tho…

And a more basic technical problem is that OSes prevent users from modifying the apps running on their devices.

Re: How Bluesky draws its logo on screenshots

#446

Earlier quoted context omitted.

Unfortunately “are you sure?” checks simply don't work, too many people are trained to just click yes/OK to close the message and get back to what they were trying to do.

"are you sure" checks work if you force deliberate effort on the part of the user. Imagine having to type "I want to get hacked" on a keyboard layout which randomizes with every character.

[deleted]

Re: How Bluesky draws its logo on screenshots

#447

This is a pretty cool, harmless hack honestly. I don’t see how you could be mad at it.

It feels restrictive, especially since it’s part of a broader pattern of limiting user freedom on platforms. For instance, on PC you can't simply right click on a video and save it on bluesky. They add some frontend bullshit to prevent you from doing that. On "new" Reddit I remember when you saved an image it would always have a watermark on it. On PC, you can't preview the raw image/video either. On Instagram you ca…

The data is publicly stored on [publicly accessible servers](https://atproto.wiki/en/wiki/reference/core-architecture/pds) so you can indeed do whatever you want with the uploaded media on BlueSky as well. Not to mention that if you care enough about this issue, there are numerous alternate clients to access BlueSky.

Re: How Bluesky draws its logo on screenshots

#448
post #14

Earlier quoted context omitted.

It's equally possible there was one engineer with some free time who thought it would be cool.

And such engineer would have enough organizational clout to just ship it without going through anyone?

It's pretty easy to find the PR considering the entire app is OSS https://github.com/bluesky-social/social-app/pull/9637

Re: How Bluesky draws its logo on screenshots

#449
post #211

Earlier quoted context omitted.

> This is the same technology that prevents you from accidentally screenshotting your password manager Yes, and I would say it's a bad thing that the OS tries to prevent this. > seeing “follow” on every screenshotted post is just useless noise, but a small unobtrusive platform icon is a useful reminder that the post came from Bluesky and not another very visually similar service like X(cancel) or Mastodon. I would sa…

> Yes, and I would say it's a bad thing that the OS tries to prevent this. Another way to look at it is the OS makes certain guarantees to the developer around security. Giving control of this to the user would erode that guarantee from the OS to the developer. The result of that is that some developers would simply never display some information (e.g. due to their own contracts or reasonable concerns about fraud/abu…

The user should be the ultimate authority of what their computers do, not the app developer. It's my phone, not the app developer's phone. If my phone has a "screenshot" function, I expect to be able to invoke it whenever I want, not whenever some app developer deems it OK.

Re: How Bluesky draws its logo on screenshots

#450

Earlier quoted context omitted.

[flagged]

> “Security” that makes ordinary sharing unusable is often just UX debt wearing a security badge. Very true. > The right fix is selective redaction, not disabling screenshots everywhere. That's still a partial fix, though. It would address the problem of accidental screenshots in a better way, but the main point of contention is around intentional ones. Here, the problem is that the app vendor and the user have diffe…

The app developer shouldn't even get a vote. The user should be the one who decides what information is "sensitive" and what isn't.
Post reply on HN