← Back to context

Comment by everdrive

21 hours ago

No one should ever browse the web on a smart phone. Not joking.

This API also works on the desktop. In fact, you can't use this system without a phone if your browser isn't Google enough.

We are going to see sooooo many scams out there. No wonder Google is locking down third party Android apps outside of their control, getting a user to install "device verification.apk" will become super trivial after people have clicked through these popups a couple times.

Phone is small computer

  • It is, just like a calculator is a small computer. It's not a personal computing device though, in the sense that the user can't develop and deploy their own software/tools on it.

  • No one should ever browse the web from an ESP32 either. Like seriously the dark patterns are bad enough from a desktop where you've actually got the screen real estate to see the whole page, have other sites open for comparison, have a keyboard to type your own notes, etc. Most browsing can simply wait, especially the adversarial-commercial type we're talking about here.

And also don't install apps? What's left then?

  • A device I have no choice in owning because modern employers assume you have sometime to install an authenticator app on. That's what it is for me. Also, sadly, it's an anchor for Signal. Otherwise I don't use the stupid thing.

well that just seems counterproductive and unreasonable but it's Friday so what do I care

-- sent from Chrome on Android

and it seems Google wants to support people like you!

That entire QR barcode thing is so that you can browse the web on your laptop/desktop, and _still_ rely on smart phone's attestation, no mobile browser needed.