How Bluesky draws its logo on screenshots

(timmarinin.net)

141 points | by gavide 2 hours ago ago

107 comments

  • 3form 2 hours ago

    Well, I have not once found a single case where an app reacting to screenshots and controlling the process in any way was anything to me but hostile and annoying. This one does not help.

    It somehow is perfect example of how modern software engineering feels to go astray for me. A feature in my device working completely in benefit of the one providing said software. I wish, and wish only I can, that this trend goes away at some point.

    • thepasswordis an hour ago

      It is actually astonishing to me that this is not something which can be turned off at the OS level, or as a permission setting in the app permissions.

      The app knowing I took a screenshot feels adjacent to me to a keylogger. Imagine how many apps are capturing that information silently. To my mind, a screenshot is something that is happening outside of the app context, the app knowing about it is a security flaw imo.

      • CircuitSeuss an hour ago

        > The app knowing I took a screenshot feels adjacent to me to a keylogger.

        To my knowledge, this is a misunderstanding. The app does not know that you are taking a screenshot, rather iOS knows you are taking a screenshot (as it must) and is excluding an element on display that has been designated by the developer as sensitive information. This is the same technology that prevents you from accidentally screenshotting your password manager; the developer has simply performed a nifty trick to display a small icon behind where the “follow” button would otherwise be displayed.

        There are plenty of instances where this sort of thing can be annoying, such as when you try to screenshot a streaming service app and DRM enforcement leaves you with a blank screenshot, but IMO this particular instance is actually very tasteful; seeing “follow” on every screenshotted post is just useless noise, but a small unobtrusive platform icon is a useful reminder that the post came from Bluesky and not another very visually similar service like X(cancel) or Mastodon.

        • efskap 4 minutes ago
        • chrsstrm 12 minutes ago

          "The app does not know that you are taking a screenshot, rather iOS knows you are taking a screenshot (as it must) and is excluding an element on display that has been designated by the developer as sensitive information. This is the same technology that prevents you from accidentally screenshotting your password manager"

          And that is reasonable, but it is also a surface where an app touches the OS, which should be a permission boundary that I can control. Allowing the option to opt-out of screenshot blocking with a proper double-confirm warning and biometric auth is also reasonable.

        • zahlman 9 minutes ago

          > This is the same technology that prevents you from accidentally screenshotting your password manager

          Yes, and I would say it's a bad thing that the OS tries to prevent this.

          > seeing “follow” on every screenshotted post is just useless noise, but a small unobtrusive platform icon is a useful reminder that the post came from Bluesky and not another very visually similar service like X(cancel) or Mastodon.

          I would say it's a bad thing that Bluesky makes the screenshot look different from what was on screen for the user. If I cared about excluding the "useless noise" from a faithful depiction of the pixels on my screen, I could address that myself.

        • akersten 34 minutes ago

          Neither of those use cases seem good or tasteful to me as a user, I don't think this concept of "secure (from the user) context" should exist, but maybe that's just me

        • Barbing 37 minutes ago

          Can Snapchat no longer inform the other user when a screenshot was taken?

      • raincole 35 minutes ago

        > The app knowing I took a screenshot feels adjacent to me to a keylogger.

        That is what this article is about and why you should read it before commenting. The whole point is that it doesn't need to know you're taking screenshots. That's why it's a clever trick.

        • echoangle 32 minutes ago

          But for completeness, iOS apps can detect screenshots. That’s what allows them to show annoying popups with a share option when you take a screenshot.

          • edoceo 12 minutes ago

            What? App-B on iOS knows when I'm taking a screenshot from App-Y? I don't have iOS to check but that seems crazy.

      • araeyn an hour ago

        Did you read the article? Bluesky doesn't know you're taking a screenshot, iOS just hides the follow button in the screenshot (consequently making the Bluesky logo visible).

        • LPisGood 30 minutes ago

          iOS does tell the app that a screenshot was taken though

        • verdverm 29 minutes ago

          > Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that".

          Found in the HN commenting guidelines, linked at the bottom of most pages

      • dc443 an hour ago

        but you didn't read the part where the mechanism is explained? it doesn't do anything like capturing information. it just marks a button "sensitive" causing it to be hidden in a screenshot, thus revealing an icon that was put there underneath the button.

    • fer 2 hours ago

      > hostile and annoying

      If someone from Google Maps or LinkedIn team is here, please, when I take a screenshot it's because I want to a screenshot, not share the friggin location/post.

      Not sure who got the idea that it was useful, it isn't.

      • mikepurvis an hour ago

        I would happily use the Google Maps "share" feature, but I've yet to encounter any but the simplest of scenarios where it actually preserves the entire context of what I'm trying to share: the viewport, the start and destination, stops along the way, route choice, the time of day, all of it.

        If I'm sending a screenshot it's because I want to send exactly what I see on my screen and not have my recipient's gmaps instance happily recompute a route it thinks is better or leave out the routing information I included, or switch from biking to driving directions, or whatever else.

        • Waterluvian an hour ago

          It's of course about lock-in. In the early Web-GIS era there were a few competing but popular notation standards for sharing lat/lon/zoom/<sometimes more> that was meant to be human readable and compatible with any WMS or similar.

          Ah... to imagine a world where you could just share a coordinate string and people could open it in whatever map app/page they wanted. Geo URI is probably the closest we have today but I don't think much of anything outside the OS Geo community accepts it.

          • mikepurvis 41 minutes ago

            I think that's actually a separate issue. What I specifically want from a Google Maps share URL is for it to be something I can send over text that will reproduce for my recipient exactly what I see.

            A lat/lon/zoom/start?/dest? is kind of what a Google Maps share currently is, but it's neither an interoperable standard nor a reliable capture of the current state, so really the worst of both worlds.

            (Also, hi AB! Nice to see you on here)

            • Waterluvian 26 minutes ago

              Hi! I think I’m on the same page (give or take a zoom level) now. That is hard to do between separate geodatabases (hence CRS, placenames, geocoding, etc.) but Google isn’t even doing it within their own. And the only way I can obtain a link is to first place a pin, which wants to snap to nearby features. If I try to link a nice trail near my home it snaps to the quarry instead, making me look like a maniac with a terrible idea of what a “quiet walk” looks like.

      • umeshunni an hour ago

        Today I noticed that Amazon Pharmacy decided to blank out my prescription info that I was screenshotting to send to my doctor. WTF.

        • AshamedCaptain an hour ago

          From the same lunacy that forces me to write my 30-something character Wi-Fi password on a "secure password field" that only shows me the last character, almost ensuring that I will make an unlimited number of typos and spend way too much time for something that should only take 30 seconds.

          It's not clear who it is protecting against, it does not seem to be effective at protecting against anything at all, it is actively annoying to the user, and has no way to disable. Perfect example of the usual "security theater" feature.

          • Barbing 43 minutes ago

            Super secure!!1one

            Unsecure: open Shortcuts, tap Gallery, search “Adjust Clipboard”. Add to Action Button folder and run from Action Button. - Or add “Dismiss Siri and Continue” action after “Get Clipboard” so you can say “Siri, Adjust Clipboard”.

            Type in the still-unreasonably small window, tap Done, paste password. (Then clear clipboard I suppose and consider privacy implication if your clipboard syncs to Mac.)

        • Barbing an hour ago

          Apple gave too much power to iOS developers. They can use DRM strong enough that when your iPhone is open in iPhone Mirroring on your Mac, and you record your Mac screen with a third-party tool, the iPhone screen is blacked out.

        • wolvoleo an hour ago

          And if you take a screenshot of a product in the Amazon app it hijacks that and copies a link instead.

      • Barbing an hour ago

        Good thing if you have GMaps open to the directions list while driving and tell Siri to take a screenshot, it doesn’t throw up a full page of nonsense over your directions that only Voice Control (not Siri alone) or a [potentially nonexistent] passenger could close.

        Oh wait it absolutely does.

      • Razengan an hour ago

        Blame Apple for even allowing apps to be aware of the user taking a screenshot.

        Just like their iCloud Keychain API that lets apps secretly track users across app reinstalls and device resets.

        • bethekidyouwant an hour ago

          Getting your account back on reinstall is good

          • singpolyma3 33 minutes ago

            It's massively confusing to users though.

          • OneLeggedCat 44 minutes ago

            Maybe, so long as it's optional.

          • Razengan an hour ago

            I can fucking type my username and password, thank you.

            And I prefer to see and choose the data an app stores on my fucking ICLOUD ACCOUNT. And fucking DELETE it when I want.

            There's no way to do that from an iOS device.

    • shiandow 2 hours ago

      It still baffles me that it has become normal for an OS to place the wishes of an app above those of the user.

      Hijacking the screenshot process is a privilege that you ought to be able to revoke, it's insane to allow software to be given more control.

      And don't tell me it's anything to do with security when it can be circumvented in any number of ways.

      • javier2 an hour ago

        Did you read the post? Nothing is hijacked, but its a trick where they render the normal button in a ui element for secret data, which is blanked by the system on screenshot, revealing the logo underneath. Its a reasonable feature, so its hard for apple to control it better or remove this.

        • xorcist an hour ago

          That is a lot of words just to make it sound reasonable that a page can be exempt from the underlying screenshot functionality. It isn't. Not without asking the user.

        • nemomarx an hour ago

          users should have some way to control if screenshots have secret data in them or not, really. what if I do actually need to preserve it?

          • edoceo 6 minutes ago

            I like your idea. When the screenshot is taken a user can have an option: Include Secrets? And the Apps can only hint at what to hide.

        • Analemma_ an hour ago

          No, it’s not a reasonable feature. If I take a screenshot, I want the image to include what is displayed on my fucking screen, period. What is so difficult about this?

    • tchalla an hour ago

      Side note- The Screenshot culture itself needs to die, sorry. Many a time, a share button simply works. I don’t know why people would share a screenshot or a map instead of pin and share their location. Yes there are cases where a screenshot helps but majority cases simply is “come to this place” a which turns out to make more difficult because people apparently don’t know how to share locations with pin and share!

      • dhruvrrp an hour ago

        Screenshots are much better for archival. So many times you go back to a url/link you shared, and poof it's gone or the content has changed from when you sent it.

        Screenshots allows you to get a point in time reference to what you are sharing.

      • jasonjayr 29 minutes ago

        The ideal "World Wide Web" envisioned by it's original design, was that a URI was a durable pointer to an immutable piece of information.

        In 2026, we now know that the information can be edited, or completely removed for many reasons, some legitimate, and some nefarious.

        Taking a screenshot is the easiest way to ensure the original is kept for folks to see. Frankly, it'd be even better if (a) the app can signal to the OS information about the url to the page for the screenshot, (b) timestamps were captured in the image and not cropped, and (c) the OS can authenticate the screen shot and digitally sign that it came from an unaltered device.

    • andai an hour ago

      When I take a screenshot in ChatGPT, it shows a "share this chat?" toast at the top.

      The toast shows up after the screenshot, but my phones's long screenshot feature captures the top part a second time, so the top part of the chat becomes unreadable.

    • alasano 11 minutes ago

      I hate the ChatGPT app and Spotify the most for their screenshot behavior.

    • qurren 42 minutes ago

      I also despise this "screenshot blocking" stuff. A device listens is supposed to me, not to the apps. I want a screenshot to be a copy of the raw pixels, and an app should not know about it or have a right to know about it.

      Of course this is doable on open source OSes like GrapheneOS, it just sucks that you have to keep modifying the OS every time they release a new version

    • bigyabai 2 hours ago

      > I wish, and wish only I can, that this trend goes away at some point.

      You don't have to wish, in this scenario. Bluesky supports third-party clients, you can use one that has a more minimal featureset if you prefer.

      • drdexebtjl 43 minutes ago

        For Bluesky, sure. I think the comment was aimed at the trend.

        Android and iOS should not let apps do this, because it can be (ab)used by apps that you can’t really choose not to use.

        I know there’s a popular bank in my country that completely blocks screenshots and screen recordings on Android somehow.

        • edoceo 5 minutes ago

          In USA Wells Fargo blocks it, so I can't get a picture of the bugs I'm trying to report.

  • jjcm an hour ago

    If it's between this and a perpetual logo, I'll take this any day.

    I actually really like this approach. The action button isn't relevant in this context, and it doesn't occlude the content.

    There's certainly situations where you wouldn't want this (ie if you're developing the app and you want to redesign starting from a screenshot), but for the average user I think this isn't overly hostile. I understand that people are dogmatically opposed to intent being modified, but I think you need to balance nuance. I actually enjoy having an attributable source in shared elements, and I think this is a low-impact way of achieving that.

    • pembrook 12 minutes ago

      No need to set up a false choice as a straw man to knock down.

      It is user hostile.

      You're just defending Bluesky because you're on the same team politically. If the subject of this headline was X (an app that does the same thing, which I also don't agree with) everyone here would be seething with rage.

  • skiing_crawling an hour ago

    This is phone OS developer's fault for even allowing it. When I take a screenshot, I expect to have an image of exactly whatever was displayed on the screen at the time. Its not a picture of your app, its a picture of my screen. Some banking apps used to (or still) prevent this and now some apps get a hook to insert their branding. My device serves some master other than myself.

    • spike021 an hour ago

      iOS allows something similar. twitter (X) will also add a logo. I believe reddit did the same but i stopped using their app a while ago.

  • pfraze an hour ago

    This is in fact a watermark to promote the application, which otherwise wouldn't be recognizable since Bluesky looks like every other microblogging app. I didn't know that Sam literally named the file GrowthHack.tsx, which is pretty funny.

    • red_hare 11 minutes ago

      I can't help but respect the dev's self-awareness

  • _djo_ 2 hours ago

    X and Threads do this too. I wish they all wouldn't, messing with screenshots should only ever be done when preventing them as a security measure.

    • dvngnt_ an hour ago

      They shouldn't even disallow screenshots from a security measure. If the user wants to take a screenshot of their bank account info or a password manager they should. Maybe an additional permission for screenshare. No device has protection against a second device taking a recording so it's really just security theater

    • wolvoleo an hour ago

      Even preventing them shouldn't be possible. It's just security theater anyway. You can easily capture it with another camera.

    • FinnKuhn 2 hours ago

      Reddit as well. Although they let you disable it from what I remember.

  • internetter an hour ago

    Nobody in the comments talking about snapchat where like one of the core pillars of what "sets their service apart" is the difficulty of taking a screenshot without notifying the other party

    • Mtinie an hour ago

      Wasn’t that the entire premise of the product when it launched? Disappearing messages and minimal footprint so you could be confident your communications were semi-private?

      That was the expectation of using the product so it fits and isn’t anything like this discussion.

      • BasicallyBluesk 9 minutes ago

        That plus product design.

        Yellow.

        They fuckin did it. Not construction not a warning of some type. Not yellow pages. Yellow - cool looking yellow.

        Is what I said to myself as a 20-something product designer

  • BasicallyBluesk 16 minutes ago

    The logo is actually decentralized, we just host it on our centralized “relay”. It’s basically open tho.

    We use “Zero Knowledge Pixels” so no images can be leaked onto the dark web where all the criminals live.

    The way it works is, as long as our content is so moderated to hell, most dark web hosts avoid crawling us entirely. It’s just not that interesting of content. Which means it’s safe content. Safety first, I always say.

    So we listened to the feedback from our dozens of users and put all watermark images on the blockchain so it’s instantly federated and backed up in a vault in Antarctica. We call it the “Waterhose”. When an image reaches the vault, it becomes “frozen” and only an admin can “thaw” the data.

    It’s all backed up with proofs. By people way smarter than you lol

    Use our app

    • pfraze 4 minutes ago

      We really need better haters

  • jadengeller 23 minutes ago

    Tangentially, I see a lot of people here upset that apps can react to your screenshot before it is captured. I think it is helpful to think about it as a tradeoff between freedoms:

    (a) the freedom to screenshot any content on your own device (b) the freedom to share content with others that cannot be screenshotted

    It can be annoying when DRM or privacy features block a screenshot, but I think it can also benefit the platform ecosystem that you participate in as a user too. Idk!

  • ProfessorLayton 33 minutes ago

    Related: Airplay Screen Mirroring being too damn cleaver for its own good. Yes, I want to mirror my screen, and no I don't want the app to enforce it's own controls/blocks on what is being displayed on the external screen (Looking at all the streaming apps).

    It's bad UX all around:

    - iOS claims it mirrors my screen (It does not)

    - Except when it does mirror my screen (Depending on the app!)

    To be clear, I do think it's nice to beam the video directly to the target device for better quality, but that's not what screen mirroring is!

  • hmokiguess 2 hours ago

    This sort of stuff to me is an example of fear within an organization. Whenever I see engineering resources allocated towards self promotion and branding rather than quality and features for its users it shows how leaders want control over narratives.

    • skupig an hour ago

      It's equally possible there was one engineer with some free time who thought it would be cool.

      • AlexAplin 44 minutes ago

        It's probably silly to make OP's judgement of any of these implementations in isolation, but you can sense a real fear about the growth (or lack thereof) inside Bluesky. Fiddling with the presented metrics (likes count getting moved ahead of reposts), promoting total user signups while being silent on collapsing DAUs. They are promising a lot at once with AI custom feeds from Attie and subreddit-style communities that smells like feature creep.

        • pfraze 19 minutes ago

          Your indicators that we're afraid about growth is that we're shipping features and experimental new products?

      • Larrikin an hour ago

        Implementing a watermark isn't a thing anyone thinks is a cool feature they want to try out.

        • paimapi an hour ago

          what do you mean, it's a very normal cool thing that everyone loves

          Sent from my Ryobi Riding Lawnmower

        • singpolyma3 28 minutes ago

          I mean. I read this and immediately thought it was a cool thing I'd like to try out

          • Larrikin 10 minutes ago

            By the end of your first year in CS you will have hopefully learned enough to place an image on something, that's about as cool as it gets.

      • 398642258909 31 minutes ago

        Adding a watermark, how radical, dude

      • hmokiguess an hour ago

        And such engineer would have enough organizational clout to just ship it without going through anyone?

        • rbaudibert an hour ago

          That's how a modern organization works. You trust your colleagues will do good work, and will ship something useful and there's not really "someone to go through".

          I agree this can be defined as cool and very very likely someone did this on their free time/prompted Claude on the side.

          • hmokiguess an hour ago

            It's a Series B company, it needs to make money, and they have to answer to a board and provide information to investors. They have a roadmap, direction, and leadership. Yes, trust and good intentions is an awesome thing and I hope they have that indeed, but I would think reality lies in the middle of both sides.

            • rbaudibert an hour ago

              I've worked at a Series B company and reality is this is too minor for investors to care on its own, and it's also very hard to correlate this change to new revenue, so not something that's likely to have been done with that intention

        • x313 an hour ago

          Bluesky has <100 employees so it could be possible

          • hmokiguess an hour ago

            I agree that having less people to manage means easier to build trust relationships and culture, though I believe some form of management and control must exist.

            • pfraze an hour ago

              I'm sure this wasn't even in the top 10 of things that we made sam implement out of fear

        • whyrusleeping 25 minutes ago

          Yes actually Sam often ships random fun things he feels like doing.

        • Slurpee99 an hour ago

          You're fun

    • haileyok an hour ago

      Someone spending half a day on a feature that places the app's logo in the screenshot so people seeing it can know where it came from is "fear within an organization"? You've got to be kidding lol

  • zzo38computer 42 minutes ago

    If the feature can sometimes be useful (including this situation, which some other comments mentioned; but also for other things such as hiding actual secure data), then perhaps it should be made as a setting which can be changed in the setting menu (e.g. "Exclude secure data from screenshots"; it should also mention which apps use this feature), so prevent abuse. (This would also make it clear what the feature is, as well as being able to disable it.)

    • akersten 25 minutes ago

      That such a setting does not exist suggests the feature's true purpose is not for the end user's own benefit!

  • ivan888 37 minutes ago

    > The “Follow” button is visible when I take the screenshot mid-switch.

    Does this indicate that the privacy feature has a gap, where you could reveal the length of your password if you take a screenshot mid app switch?

    • OJFord 12 minutes ago

      Probably, but to the extent that was at all a problem to begin with, multiply it by another 0.0001 or whatever for the threat of the screenshot being taken mid switch away!

    • tom1337 16 minutes ago

      No because per default the input is not cleared when screenshotting. If you‘d implement this yourself for security reasons you'd most likely blur / overlay the whole screen when the app enters background state.

  • kimos an hour ago

    Perplexity does this on web by adding a logo in response to key combos for normal screenshot shortcuts.

  • 0xferruccio an hour ago

    To be fair this is useful for discovering bluesky from screenshots getting posted on other platforms.

    Their product UI kind of looks like X, so it's helpful to know the source of a post

    • grim_io an hour ago

      I don't think anyone doubts that it benefits the company.

    • mulmen an hour ago

      If only there was some uniform way to identify a resource. But it might lead people out of the walled garden so best not to risk it.

  • bewal416 2 hours ago

    I think RevenueCat does the same thing. Smart way to exploit network effects!

  • lukeholder an hour ago

    Tiktok has been watermarking videos since the beginning.

  • ebbi 2 hours ago

    X does the same thing.

    • Jonovono an hour ago

      Just since Nikita joined (altho now he's gone, doubt they will remove it tho)

  • add-sub-mul-div an hour ago

    Is this iPhone only? I've never seen this on Android.

  • whalesalad 38 minutes ago

    I’ve noticed that if you screenshot a thread in the threads app an “@threads” logo appears in the upper right corner

  • garyhasapoint an hour ago

    has this guy lived on a rock? reddit/twitter/etc every social media platform does this already.

    • wolvoleo an hour ago

      It's pretty likely that bluesky users aren't on other social media. Because it pretends to be better than them (this shows it isn't really, though)

      • pfraze an hour ago

        I know you don't think it's bluesky, but which app do you think is better at putting its logo on screenshots?

  • adolph an hour ago

    Example n+1 of why I only use web and not download an app

  • winterqt 2 hours ago

    This is arguably missing the "how" from the title -- can someone fix?

    • CaliforniaKarl an hour ago

      The best way to ask for this is to send an email, to the email address which you can find at the bottom of the page (click on "Contact"). There's no guarantee that the mods will find your comment otherwise.

    • FinnKuhn 2 hours ago

      @Dang: I would like to report an innocent victim to the automatic "How"-Removal.

      • altairprime an hour ago

        Saying @dang has no effect; it does not activate a batsignal or any other mechanism of mod summoning. The only way to be sure a mod see this is to email them; see the contact link in the footer and include a link to the comment.

  • Razengan an hour ago

    As Spring inevitably leads to Winter, and Night follows Day, Thus the Inevitable Enshittification of all Centralized Platforms