Hacker News Reader

Don't enter your password into random dialogs?

Honestly though, in my experience macOS especially has a habit of presenting legitimate password dialogs completely out of the blue. It clearly trains users to enter their password into random dialogs that appear at random times.

This is something that hasn't been fixed despite years of complaints from the security community for exactly this reason.

It's especially annoying as touchid provides a standard authentication mechanism on macOS, that doesn't provide reusable credentials to anything.

Agreed. I am so trained by macOS that it needs my iCloud password or account password randomly that I don’t even think about it anymore. I like to consider myself a savvy computer user, but I frankly only give myself a 50% chance at best of identifying a malicious password prompt at this point.

Reply on news.ycombinator.com