Not sure if this is the correct place to post, but I just wanna kinda rant a bit.

I'm not the only one that hates this, right?

An app can just do a "This App Does Not Allow Screenshots"? Like... wtf?

Like, its my phone, and some app can just decide to disable a fuction of my phone. It's my phone and if I wanna take a screenshot, I'm taking a screenshot. I don't care about whatever "security" the app developer wants.

Imagine if every online shopping app whether fast food or amazon, just used this to block you from taking a screenshot so you can't save the records in case of a dispute.

Which android developer thought it was a good idea to let an app disable a function on your phone. Even iPhone doesn't have this stupid concept.

Sorry for the rant.

Anyone wanna share your stories?

(P.S. I have a cheap secondary phone to take photos of the screen. "This App Does Not Allow Screenshots" my ass lmao, I'm taking the screenshot whether the app wants it or not.

you are viewing a single comment's thread
view the rest of the comments
[–] 72 points 2 years ago (15 children)

I work for a company that builds an app /sdk that handles credit cards / payments. It's one of the (many) requirements for getting an industry standard certification (like PCIDSS / MPOC). The app Must block screenshots, and Must disable the camera while using it...

  • source
  • hideshow 15 child comments
  • [–] 23 points 2 years ago (8 children)

    What on earth are those in charge of certification standards thinking they'll achieve with requirements like this?

  • source
  • parent
  • hideshow 8 child comments
  • [–] 48 points 2 years ago (3 children)

    It's probably to stop third party apps from screenshoting the banking app.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 2 years ago (2 children)

    Why is this only a problem on mobile? Why doesn't desktop have similar requirements?

  • source
  • parent
  • hideshow 2 child comments
  • tbh the security settings on desktop devices tend to be more lax in general; for example almost any desktop pc has an open bootloader, means you can sideload an operating system from usb. The consequence is that no password-at-login will protect your private data; only full disk encryption can.

    Smartphones on the other hand often have a fully-locked bootloader, which means it's totally non-trivial to install an alternative operating system. especially, it often contains wiping any data on the smartphone, so an attacker with access to the device can't simply install their own OS and read the internal storage.

  • source
  • parent
  • [–] 15 points 2 years ago

    The same functionality that you use to take screenshots can be hijacked by bad actors to get access to your stuff. It's especially bad if they can see your MFA apps or other sensitive info.

    Not saying the functionality is always used for the best of intentions, but there are many situations where I see it as necessary.

  • source
  • parent
  • [–] 8 points 2 years ago (2 children)

    Accidentally screenshotting your bank acct and routing number is the only one I can really think of.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 2 years ago

    Or your "time clock earth sounds" app from the not so well policed appstore takes silent background screenshots, grayscales them and sends them to their host for OCR.

    I agree this permission is annoying. But I differ in I feel it should be system controlled and can be invoked by apps that identify specific fields to be blocked, instead ofnjusy disabling it outright.

  • source
  • parent
  • [–] -4 points 2 years ago (5 children)

    Why did you capitalize "must"?

  • source
  • parent
  • hideshow 5 child comments
  • [–] 20 points 2 years ago* (4 children)

    Probably a nod to the written style of RFC definitions, which have the word entirely in capital letters, as in... the implementation MUST do such and such, and SHOULD do this other thing. In this case, the relevant security standard(s)

  • source
  • parent
  • hideshow 4 child comments
  • [+] -12 points 2 years ago (3 children)

    We have italics and bold characters for that.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 23 points 2 years ago (2 children)

    RFCs were being written back when line printers couldn't do either.

  • source
  • parent
  • hideshow 2 child comments