41–50 of 154 posts
Link to code in question https://github.com/Igalia/webkit/blob/9777baa3db09cad7ed5b2c...
Would you mind linking to the upstream repository instead? GitHub doesn’t let you search in forks.
(For some reason "search in this repo" doesn't work for keyword `malwareDetailsBase` [1], but it's there)
[1] https://github.com/WebKit/webkit/search?q=malwareDetailsBase...
Earlier quoted context omitted.
Why is this getting downvoted? I'm also interested in why this approach isn't taken.
A couple possibilities I can think of: * the list may be prohibitively large * it exposes to the bad actors exactly which of their scams is detected, so they can simply refine their methods until their sites don’t make “the list”
Earlier quoted context omitted.
Why is this getting downvoted? I'm also interested in why this approach isn't taken.
A couple possibilities I can think of: * the list may be prohibitively large * it exposes to the bad actors exactly which of their scams is detected, so they can simply refine their methods until their sites don’t make “the list”
[0] https://mobile.twitter.com/thefalken/status/1183445477645312...
Earlier quoted context omitted.
A couple possibilities I can think of: * the list may be prohibitively large * it exposes to the bad actors exactly which of their scams is detected, so they can simply refine their methods until their sites don’t make “the list”
Bloom filters take care of the first. There will always be an arms race between attack and defense, so I'm not concerned about the second issue.
Earlier quoted context omitted.
Why is this getting downvoted? I'm also interested in why this approach isn't taken.
A couple possibilities I can think of: * the list may be prohibitively large * it exposes to the bad actors exactly which of their scams is detected, so they can simply refine their methods until their sites don’t make “the list”
Earlier quoted context omitted.
"Or they can essentially turn off Safe Browsing in China." The OP as well as the associated blog post[1] as well as the Apple-provided fine-print language do not make it clear to me that this "feature" is exclusively enabled for Chinese users (or, perhaps Chinese IPs). Could someone point to a source that confirms a US person, in the US, with a US-purchased iphone, would not have their browsing history transformed an…
If this source is to be believed, it's either going to Google or Tencent, but never both: https://twitter.com/eromang/status/1183422784082530304/photo... You can try yourself by going to one of the IOS Safe Browsing test pages on your phone, and when the warning pops up click "Show Details". It'll either say Google or Tencent on the warning message, which should let you know which one got chosen for you. https://test…
Wait, Apple is Sending URLs to Google ?
Default configuration of Chrome sends whatever you type, while you are typing it, in the location bar to Google. And Firefox can do that too, no idea what their default configuration is.
Earlier quoted context omitted.
"Or they can essentially turn off Safe Browsing in China." The OP as well as the associated blog post[1] as well as the Apple-provided fine-print language do not make it clear to me that this "feature" is exclusively enabled for Chinese users (or, perhaps Chinese IPs). Could someone point to a source that confirms a US person, in the US, with a US-purchased iphone, would not have their browsing history transformed an…
If this source is to be believed, it's either going to Google or Tencent, but never both: https://twitter.com/eromang/status/1183422784082530304/photo... You can try yourself by going to one of the IOS Safe Browsing test pages on your phone, and when the warning pops up click "Show Details". It'll either say Google or Tencent on the warning message, which should let you know which one got chosen for you. https://test…
I'm curious if, as @thefalken brought up [0], this is illegal under the GDPR, given that it's a hidden opt out and should apply to EU citizenry with browser language set to Chinese. [0] https://mobile.twitter.com/thefalken/status/1183445477645312...
There’s a lot of legal language around this exception, but fraud is directly called out as a legitimate interest and means that the group controlling the data would not need to obtain user consent.
For additional reading, I’d recommend the following post: https://www.gdpreu.org/the-regulation/key-concepts/legitimat...