I wondered why my old blog post was getting some more attention these last few days. textslashplain.com/2017/01/1… Turns out folks have noticed that the convenience of mobile UX has security implications.

The Line of Death

When building applications that display untrusted content, security designers have a major problem— if an attacker has full control of a block of pixels, he can make those pixels look like anything…

textslashplain.com
3
4
1
24
Replying to @ericlaw
I figured it’s because @mikewest, @estark37 and team are researching the implications of allowing arbitrary content in their PIP feature. groups.google.com/a/chromium…

Apr 30, 2019 · 10:37 AM UTC

1
1
Replying to @bilcorry
(There's been some recent excitement at the discovery that Chrome on Android hides the address bar if you scroll down and this a fake one can be painted. One of the more popular articles linked to my blog.)
2