Skip to content

Passwords should be invisible to the accessibility services#9

Merged
RyuzakiKK merged 1 commit intoRyuzakiKK:masterfrom
mohammadnaseri:master
Aug 11, 2018
Merged

Passwords should be invisible to the accessibility services#9
RyuzakiKK merged 1 commit intoRyuzakiKK:masterfrom
mohammadnaseri:master

Conversation

@mohammadnaseri
Copy link
Contributor

Due to recent attacks, malicious apps that are using the accessibility service can capture all user inputs. In this case, the passwords should be ignored for the accessibility service, so such attacks cannot happen. This is done by our research project in CISPA, Saarland University, Germany.

@RyuzakiKK
Copy link
Owner

Thanks for your PR.
Even if making more complicated the input for people that legitimately need an accessibility service is not ideal, until a better solution is found, this seems to be good enough for me.

@RyuzakiKK RyuzakiKK merged commit 7457935 into RyuzakiKK:master Aug 11, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants