Hacker News Reader

Comment by LikelyABurner | Hacker News Reader

Wait until your bank requires you to use it to pay your bills and tax preparation websites require it to pay for taxes.

My former business bank actually did this. They insisted their web app "was compatible with all modern browsers, but more compatible with Chrome" - I couldn't make transfers to other accounts with Firefox, it just hung indefinitely.

Virgin Money, UK - https://uk.virginmoney.com/

> was compatible with all modern browsers, but more compatible with Chrome

Is Animal Farm not required reading in Orwell's home country? Or was that a misquote, or maybe just something from a random support worker? It's almost too on the nose for that statement to be written by someone familiar with that book.

I was wondering the exact same thing with that wording. Maybe someone, somewhere was required to put in a notice like that (or worse, make it so that it does work better in Chrome for whatever reason) and decided to word it like that to fly under the radar. Unlikely, but I like that imaginary world.

I use Virgin Bank and Firefox works OK for me.

This was Virgin Money Business specifically, and it's a year since I left so it might have been fixed.

It’s bad enough google captcha is broken on Firefox with all the privacy extensions on.

It is not broken. They are punishing you for not wanting to be tracked, profiled and manipulated.

I’m sure they are all going to block iOS users from using their services.

iOS already implemented this stuff

Not only did iOS implement this, but everyone either sleep-walked on it, or worse, praised it, because Apple sold it as a CAPTCHA bypass instead of a DRM scheme: https://mastodon.delroth.net/@delroth/110775677023220850

How is PrivacyPass related to iOS?

PrivacyPass is an extension that lets you pre-solve CloudFlare CAPTCHAs if you're on a VPN. However, that was too frustrating, so CloudFlare partnered with Apple to integrate PrivacyPass into Safari.

How did they do this? Simple: iOS provides cryptographic attestation that your browser isn't a bot and isn't hacked, and CloudFlare takes that as your CAPTCHA solution. This works exactly the same way that Google proposes Web Environment Integrity work.

Reply on news.ycombinator.com