Ask HN: Google Doc email virus?

Post by sebbean » Wed, May 03, 2017, 7:33 PM UTC

EdwardMSmith wrote: post #17

sebbean wrote: post #16

Earlier quoted context omitted.

what application? i tried this and dont see anything in there that looks like it could be it

"Google Docs" with the real icon and everything.

Post by jakob223 » Wed, May 03, 2017, 7:34 PM UTC

sebbean wrote: post #16

jakob223 wrote: post #9

EDIT: According to a Google representative on the reddit thread, this application is now blocked. If your account was affected, you no longer need to do anything. If you fell for this, changing your password is not the right solution - you want to log into your google account and remove permissions from the application. https://myaccount.google.com/permissions?pli=1 should show a list of apps connected to your accoun…

what application? i tried this and dont see anything in there that looks like it could be it

Post by r721 » Wed, May 03, 2017, 7:38 PM UTC

Post by caydo00n » Wed, May 03, 2017, 7:41 PM UTC

Post by creichert » Wed, May 03, 2017, 7:44 PM UTC

the_mitsuhiko wrote: post #15

hemancuso wrote: post #12

It's a pretty nasty one, since it uses their standard OAuth flow with an app "Google Docs" to have users grant full access to their email and contacts. 1. I can't believe Google doesn't have basic filters to disallow developers from registering an app named "Google Docs" 2. Perhaps there should be some more validation/limits associated with allowing apps on the platform that can gain full access to email. A secure em…

Is it actually Google or is there some unicode trickery going on?