Hacker News Reader

Comment by senttoschool | Hacker News Reader

No wonder. I recently opened a link on Instagram and the website's responsive elements were completely broken. Then I opened the link in Safari and it worked fine.

Does this script injection break Apple's ToS?

I thought Apple required Safari/Webkit for all in-app browsers?

Zuckerberg has no shame.

PS. I hate in-app browsers. They don't sync with my main browser states such as authenticated sessions.

View on HN

> Does this break Apple's ToS? I thought Apple required Safari/Webkit for all in-app browsers?

They are still using Safari/Webkit, but just injecting a script into every page.

Is there a legitimate use case that could explain why Apple is allowing this?

> They don't sync with my main browser states such as authenticated sessions.

And this is exactly why Apple gives them their own cookie jar. The alternative would be [more of] a security nightmare.

> PS. I hate in-app browsers. They don't sync with my main browser states such as authenticated sessions.

Seems like that's probably a good thing :)

>They don't sync with my main browser states such as authenticated sessions.

Under what circums do you want this?

> Under what circums do you want this?

Click on "Sign In/Up with Google". Opens in app browser. Not logged in even though I'm with Safari. Type email. Type password. Get password wrong. Type password again. Get text/email with 2FA code. Every single time.

Or Gmail app. Click link. Open in-app browser. Not logged in.

I am not a fan of the "Password Fabric" - if you are, you are not my friend...

You shouldn't be typing passwords in 2022, get a password manager.

Not paying a subscription for a password manager. And don't want a single point of failure for all my accounts.

Self-host vaultwarden, it's free, and it syncs to all your devices so you have a bunch of backups.

All the time. For example: open a link in Gmail, forget that I am in the in-app browser, and log into a service.

I’ve had to log into google/fb/etc so many times through in-app browsers when I’m already logged in in my main safari browser.

It probably is still running Webkit underneath with some additional JavaScript to track everything

It would have to be. Apple's main bugbear seems to be anyone embedding Chrome or Firefox on iOS.

> Does this break Apple's ToS? I thought Apple required Safari/Webkit for all in-app browsers?

Doesn't apply to special companies.

Apple has been fine doing things that hurt FB, see not giving them special privileges' around the Ad tracking permission changes that were added to iOS.

Reply on news.ycombinator.com