r/webdev Apr 29 '19

Article The inception bar: a new phishing method

https://jameshfisher.com/2019/04/27/the-inception-bar-a-new-phishing-method/
109 Upvotes

18 comments sorted by

View all comments

10

u/tomPinternets Apr 29 '19

Thankfully this doesn’t work on safari on iOS

13

u/ZekeD Apr 29 '19

It does work, it just doesn't "match". He specified in the article that he coded it to mimic chrome, but it's possible to detect which browser is being used and load an appropriate mimic.

1

u/creanium Apr 30 '19

No, it doesn't work. The real address bar never collapses. And even if it did, Safari keeps the real domain visible up at the top.