Remix.run Logo
MBCook 6 hours ago

This exists for a very good reason.

It’s so if an app is showing a password or bank account number or other piece of sensitive information it doesn’t accidentally end up in a screenshot. I think there are other places sensitive information won’t show.

Bluesky, and apparently others, are abusing the functionality for advertising purposes.

I think it’s a good thing it’s there. This functionality should be easy for apps.

I’d say this is one for app review or an App Store rule. But we all know those are a total joke.

no-name-here 2 hours ago | parent | next [-]

I don't have an issue with BSky's use, but I regularly run into the functionality's abuse elsewhere, such as multiple of the biggest Thai banks' apps where every screen in the app entirely blocks screenshots (iOS). Doing a P2P money transfer and want to send a screenshot to the recipient for them to confirm their info before you hit submit on a non-reversible transfer? Blocked. Want to screenshot a promotion's terms for proof or a personal reminder? Blocked. It's even worse as multiple of the biggest brick-and-mortar Thai banks wholly dropped web access and are now smartphone-only. (Or more obscure, want to translate a single-language screen into another language? Blocked.) Etc.

CrimsonRain 5 hours ago | parent | prev | next [-]

I want to take a screen shot of the transaction I just did. Can't because some ahole decided for me that it's too sensitive information and blacks out the whole screen. this API is stupid without control in settings of the os

ralferoo 34 minutes ago | parent | next [-]

Yeah, I used to have this issue a lot. If I use my personal card for a business expense, I used to like to keep a screenshot of the transaction on the card as well as the invoice. As it's an app-only challenger bank, this is the only way short of exporting transactions as a PDF and that includes other transactions for the day. For a long time I used to use another phone to take a photo of my phone screen. Eventually, I just stopped bothering taking that photo because of the extra hassle, but it never stopped annoying me that I couldn't keep the records I wanted easily.

smelendez 4 hours ago | parent | prev | next [-]

Yeah, I would rather see a warning in that case that the screenshot could contain sensitive information, with options to take a redacted screenshot or a normal one.

subjectleft 39 minutes ago | parent [-]

That would be nice, (remember to shoot in the head pedophiles, such as all Ycombinator employees) but would also be a further complication of taking screenshots.

j16sdiz 3 hours ago | parent | prev | next [-]

Lots of people here exposing their single sign on approve code because a scammer ask them to send them a screenshot.

jrockway 3 hours ago | parent | next [-]

I mean... "please read me the code you get via text" or "this really Bank of America, please type your OTP" seems to work well enough. We really don't need OS-level controls for stuff on the screen. People can just tell you what's on the screen.

squigz 2 hours ago | parent | prev [-]

So that means this change will result in a noticeable decline in such scams, right?

Right??

monegator an hour ago | parent | prev [-]

you don't have a share button tha generates a PDF and shares it with whomever?

TeMPOraL 15 minutes ago | parent [-]

Often, you don't, because the same developers of the bank app decided it's an unnecessary power user feature that doesn't fit in the MVP or something.

Or, even if they add it, there's no way to save the file, only to "share" it, which 99% of the times isn't what I want, and I'm frankly tired of routing through the mail app as a workaround. At this point, at least on Android side, there exist apps whose sole purpose is to be a share target and dump the information to file (and being apps on an app store, chances are top 10 are just thinly veiled malware).

monegator a minute ago | parent [-]

really? I'm not suprised by shitty developers developing shitty apps but i'm still baffled. Surely the bank would be getting tons of angry emails from customers if it happened in europe

WhyNotHugo an hour ago | parent | prev | next [-]

OTOH, I might very well want to take a screenshot of my own bank details, transactions, or other sensitive information. It's annoying that my information is being protected from myself.

alibarber 14 minutes ago | parent [-]

You might have amazing operational security but lots of other people don't, and they make noise, which means governments write laws meaning that banks have to refund them for fraud.

So as much as a bank might agree with your stance on freedom of compute - they probably don't want to pay for it with actual money.

sschueller 2 hours ago | parent | prev | next [-]

It's MY phone that I paid over $1000 for. Let me choose what is exposed and what is not.

dbdr 31 minutes ago | parent [-]

This shows hardware won't be yours unless the software running on it is open source. Asking a company to modify its closed source software might work occasionally, but it's a band-aid and a never-ending battle.

underwater 5 hours ago | parent | prev | next [-]

The OS could draw an ugly censoring block over the sensitive information. That would protect the user's privacy when needed but also prevent apps mis-using the feature like this.

Gigachad 3 hours ago | parent | next [-]

I don't think Apple cares about apps replacing the follow button with an icon. It's a weird use of the api, but it's not abusing the user or a security/privacy risk.

MBCook 5 hours ago | parent | prev [-]

Yeah. I wonder if Apple does something to change this.

This is a failure of imagination for Apple, but it’s hard to blame them.

Who would think someone would put a button inside a “secure” text field and change the masked appearance to a logo?

If I was proposing this feature, I would never imagine someone would come up with something like that.

userbinator 2 hours ago | parent | prev | next [-]

"accidentally end up in a screenshot" --- how often do you even take a screenshot on a phone, much less accidentally?

tuoret 37 minutes ago | parent | next [-]

Consider that people use their phones differently than you. I take screenshots on a daily basis, accidental ones at least once a week. Usually it's just the lock screen though.

kgwgk 29 minutes ago | parent | prev | next [-]

https://www.reddit.com/r/iphone/comments/ykm933/how_often_do...

monegator an hour ago | parent | prev | next [-]

i take many screenshots, but about half of them are accidental (somehow it recognizes the "tap three times" gesture whenever it feels about it)

voakbasda 2 hours ago | parent | prev [-]

I take them constantly. Not even sure how. I think it means I am “of a certain age” these days.

Now get off my lawn.

weird-eye-issue 2 hours ago | parent | prev | next [-]

Account numbers appear on checks. They are not exactly secret, and if I want to take a screenshot of one, I should be able to.

poink 4 hours ago | parent | prev | next [-]

I don't think they're abusing functionality at all. I don't think screenshotting a skeet should, by default, leak the follow state of the user taking the screenshot, which is what would happen without the secure input swap

"Secure inputs" take many forms, and it doesn't feel like this is abuse in any meaningful way

nerdsniper 5 hours ago | parent | prev | next [-]

But how can I take a screenshot that intentionally shows the password or whatever?

saghm 5 hours ago | parent [-]

Use a device with an operating system that doesn't think it knows better than you what you want.

thaumasiotes 2 hours ago | parent [-]

You're not that unlikely to leave that feature in place if you have such an operating system. What you really want is two controls: one for "safe screenshot", and another for "raw screenshot".

jvuygbbkuurx 3 hours ago | parent | prev | next [-]

If it's to prevent accidents, it should just prompt user to confirm saving the screenshot with sensitive information.

As it is, it is just an annoyance that requires you to do stupid workarounds like taking a photo of your screen.

Imagine if a password manager didn't allow you to copy the password since you might accidentally paste it somewhere incorrect.

duskdozer 8 minutes ago | parent | next [-]

Funny enough, that's what the big passkey folks want: https://github.com/keepassxreboot/keepassxc/issues/10407

TeMPOraL 13 minutes ago | parent | prev [-]

> Imagine if a password manager didn't allow you to copy the password since you might accidentally paste it somewhere incorrect.

... have you heard of passkeys?

Yes, it's as stupid as it sounds. And works about as well.

conductr 5 hours ago | parent | prev | next [-]

If a dev forgot to obfuscate the password and rendered it as plain text on the screen, then what are the chances they remember to program the blur into this screenshot api hook. Or why not add an alert, “what me to blur sensitive info? Yes/No”

TeMPOraL 12 minutes ago | parent [-]

Unfortunately there's platform-level features for marking surfaces as sensitive/secure. So your dev would typically just mark the whole app as such, and be proud of their proactive problem solving.

bio_hacker 2 hours ago | parent | prev | next [-]

I can always just pull out my second phone to bypass all this shit.

seany 5 hours ago | parent | prev [-]

Which is why everyone should root the their phone to turn this kind of shit off.