Google launches new security features to protect users from unverified apps
1–10 of 65 posts
Re: Google launches new security features to protect users from unverified apps
#2In case you don't feel like clicking, this doesn't concern Android apps, but OAuth apps that want access to your Google account.
Re: Google launches new security features to protect users from unverified apps
#3Does this also appear on websites only using Google OAuth for authentication, requesting only the email address?
Re: Google launches new security features to protect users from unverified apps
#4Google has become the judge, the jury and the executioner of the internet. Recently a malicious user embedded an image from a site that is on Google's Safe Browsing list in a forum that is itself embedded on a third party site. This nuked a popular third party site where the forum is embedded: it is now flashing red (malicious software detected) in Chrome.
Re: Google launches new security features to protect users from unverified apps
#5Does this also appear on websites only using Google OAuth for authentication, requesting only the email address?
No, it doesn't appear for email/basic profile scopes.
Re: Google launches new security features to protect users from unverified apps
#6Google has become the judge, the jury and the executioner of the internet. Recently a malicious user embedded an image from a site that is on Google's Safe Browsing list in a forum that is itself embedded on a third party site. This nuked a popular third party site where the forum is embedded: it is now flashing red (malicious software detected) in Chrome.
I was wondering how HN would spin this into Evil-Google. It's just tiring at this point. This is a perfectly valid security guard that protects their users.
Re: Google launches new security features to protect users from unverified apps
#7Google has become the judge, the jury and the executioner of the internet. Recently a malicious user embedded an image from a site that is on Google's Safe Browsing list in a forum that is itself embedded on a third party site. This nuked a popular third party site where the forum is embedded: it is now flashing red (malicious software detected) in Chrome.
I was wondering how HN would spin this into Evil-Google. It's just tiring at this point. This is a perfectly valid security guard that protects their users.
It is, and with Google in a position of owning much of what happens online, it's also Google acting unilaterally in ways that multiple actors might not.
Both statements are true: It's a good thing. It's not right to have one company with so much power
No evil Google required.
Re: Google launches new security features to protect users from unverified apps
#8I like the forced UX of typing something, though "continue" might be glossed over. It would be an interesting study to determine if typing "I know the risk" is a better safety mechanism for users (can be A/B tested for less pass-through events) than "continue".
Re: Google launches new security features to protect users from unverified apps
#9Earlier quoted context omitted.
I was wondering how HN would spin this into Evil-Google. It's just tiring at this point. This is a perfectly valid security guard that protects their users.
It is, and with Google in a position of owning much of what happens online, it's also Google acting unilaterally in ways that multiple actors might not. Both statements are true: It's a good thing. It's not right to have one company with so much power No evil Google required.
There are plenty of cases where you might reasonably question how much control they have. But this is a mechanism to protect access controls to your Google account, almost the definition of something first-party that they should gate very carefully.
Re: Google launches new security features to protect users from unverified apps
#10In case you don't feel like clicking, this doesn't concern Android apps, but OAuth apps that want access to your Google account.
I used up my 1 click effort coupon to get here to the comments, so thank you!