Comment by saljam Comment by saljam 20 hours ago 1 reply Copy Link View on Hacker News yes of course - but in this case the "unexpected" prompt is presented to the attacker, not the user.