Yahoo has pulled some shady shit with how you sign in to email from Apple devices
So my mom tells me she can't get email from any of her devices. Turns out Yahoo had signed her out everywhere: Mac, iPhone, iPad. I had to help tet her signed back in on everything
It turns out they've broken the sign-in process in the following ways. Note this is *entirely* in the native account sign-in flow in Settings:
- They've somehow broken password managers in the webview so 1Password won't fill username/password. You have to switch back & forth copying/pasting
- They've broken #passkey support here as well, I'm guessing due to whatever they did to break password managers. So you get downgraded to a less secure 2FA mechanism like SMS
- And here’s the kicker: they're injecting a super aggressive interstitial in the sign-in WebView that tries to trick you into downloading the Yahoo Mail app instead of signing in to Mail.app
There's literally no way my mom could have navigated this. She 100% would have ended up installing an app she doesn't need because Yahoo told her to and because Apple Mail was "broken." I obviously don't *know* what's behind the forced sign-outs and the breaking of password managers and passkeys, but given the aggressive upselling of the Yahoo app, it really seems intentional
cc @rmondello because passkeys
Marcel SIneM(S)US
iX Magazin
Fabian Bader
Semur Jengkol
eqtv
Zachary Cutlip
rakekniven 👁️
Aaron Parecki
The New Oil
Lenny