Hacker News new | ask | show | jobs
by kr0bat 901 days ago
I wish the article put more emphasis onto the facg that TikTok was requesting the password through a system prompt. They don't have anyone's passwords, just a conformation from the device that the correct password was inputted. This is such a nothingburger.

All that aside...is this an nypost article referencing a Dextero article referencing an (unsourced) reddit comment?

1 comments

Indeed. If you do a quick image search you can find screenshots of the same prompt for other apps: https://guide.duo.com/static/images/en/iphone-passcode_2x.pn...

But obviously "tiktok = china = bad" doesn't apply, so no ragebait article.

I haven't seen these sorts of native prompts. Even passkey prompts open with a popover toast that covers the bottom part of the screen to confirm which account you want to use. Do you know what mechanism Duo is using in this example?

Edit: could this be a prompt from a failed faceID authentication for the app's secure enclave storage? most of those prompts aren't cancelable, but this tiktok one is

Normally you'll see a prompt like "touch/face id for [app name]". If the authentication fails, you'll have the option to enter your passcode, which opens the screen in the above screenshot.
It’s the NY Post. They’re not really known for high quality reporting.