Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> So, it'd be hard to pull off such an attack.

That's what you'd think, but people rarely pay that much attention. The fullscreen prompt only shows up for a few seconds.

For example, recently a family member clicked on a fake YouTube link from an ad in Google's search results. Clicked the search bar and it immediately turned their whole screen into a "call apple support" popup.

They called me up because they thought it was a virus, but really it was just a fullscreen webpage, and being not very technologically inclined, they didn't even try Esc, Cmd+Tab, Cmd+Q, etc.



That's why I've installed adblock on every relative/friend's browser. Also disabled browser's notifications.

Then one day one of them blindly followed instructions to remove it so they can access an online newspaper. The only time they could actually follow instructions, it was actually malicious.


> Then one day one of them blindly followed instructions to remove it so they can access an online newspaper.

Wow. That's a new level of evil. I've seen "disable your adblocker", but not "remove your adblocker".

This makes it even more justifiable that adblockers remove anti-adblock messages, beyond just removing annoyances. :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: