Hacker News Reader

I've never heard the term "line of death" used to describe this before, but this concept is exactly why I've sadly convinced myself that fully chromeless browsers are a bad idea. Unless there were some sort of spoofless hardware indicator that a given UI element was being displayed by the browser, I suppose... but that sort of defeats the purpose.

View on HN

How about, in the same way that some banks allow you to upload an image that they can then show you to prove you're talking to the same party that you've talked to previously, a chromeless browser could ask you to "draw" or supply an image for trusted actions. This "badge of trust" could then be show inside any dialog that asks the user to perform any action that you would not want a website to fake. It would of course be important that untrusted website content is never able to read these pixels.

This is essentially inverting the relationship, by inserting a "zone of life" inside the "zone of death".

What's a chromeless browser?

Something like this: http://techcrunch.com/2014/11/28/yandex-brwoser-concept/

Discussed at https://news.ycombinator.com/item?id=8670503

Reply on news.ycombinator.com