Live data from Hacker News

Google Safe Browsing can kill a startup

gomox.medium.com

501–510 of 558 posts

Re: Google Safe Browsing can kill a startup

#502

Earlier quoted context omitted.

This helps one group and hurts another. If Google is liable for blocking potential malware and phishing pages, they'll either stop blocking it, or adjust their algorithm to strongly err on the side of allowing phishing sites. Businesses become safer, but more regular people will get phished.

> or adjust their algorithm to strongly err on the side of allowing phishing sites. It'a not the role of Google to disallow phishing sites (as a browser) just like it's not the role of the ISP. Make it hookable so people can chose their own phising protection service.

And then they will choose the same block list and sites will have the same problem.

Re: Google Safe Browsing can kill a startup

#503
post #502

Earlier quoted context omitted.

> or adjust their algorithm to strongly err on the side of allowing phishing sites. It'a not the role of Google to disallow phishing sites (as a browser) just like it's not the role of the ISP. Make it hookable so people can chose their own phising protection service.

And then they will choose the same block list and sites will have the same problem.

All? I doubt it. Not to mention they could offer control to override whatever you like.

Re: Google Safe Browsing can kill a startup

#504

Earlier quoted context omitted.

They have the option of not wielding the hammer. I for one never appointed them the guardian of the walled internet.

So browsers should just let users go to obvious phishing sites? It's easy to take this position when you're very tech savvy. Imagine how many billions of less tech savvy people these kinds of blocklists are protecting. It's very easy to imagine a different kind of article being written: "How Google and Mozilla let their users get scammed".

Even if you're tech savvy. I've been phished. I was only saved by 2 factor and luck.

https://blog.greggman.com/blog/getting-phished/

Re: Google Safe Browsing can kill a startup

#505
post #437

Earlier quoted context omitted.

I actually don't think this is that hard to fix though. I'm a fan of google doing their best to protect people from scammers. The real issue here is no way to submit an escalated help request when they accidentally mess up. eg they could build a service where -- and I doubt scammers would play -- $100 (or even $1k) would escalate a help request with a 15 minute SLA. I run a business; we would have no problem paying a…

This was the old Microsoft support model: opening a case cost $99(IIRC), but if the case was actually a MS bug/issue they’d waive the fee.

It might have started at $99 but it's much higher now. I think the last time I used it it was $299 but that was at least 2 decades ago. Fortunately it was their bug.

Re: Google Safe Browsing can kill a startup

#507
post #187

It's a relatively long article - but it does not answer one simple question, which is quite important when discussing this: were there any malicious files hosted on that semi-random Cloudfront URL ? I realise that Google did not provide help identifying it - but that does not mean one should simply recomission the server under a new domain and continue as if nothing has happened! From TFA: > We quickly realized an Am…

Yes, I guess if you're allowing users to upload arbitrary files that may contain viruses or malware, and you're not scanning the files, that makes you a potential malware host. That's how Google may see it. They're trying to protect their users, and you've created a vector for infection.

Re: Google Safe Browsing can kill a startup

#508

This is actually funny, because I was involved with the creation of this list, way back in 2004. The whole thing started as a way to stop phishing. I was working at eBay/PayPal at the time, and we were finding a bunch of new phishing sites every day. We would keep a list and try to track down the owners of the (almost always hacked) sites and ask them to take it down. But sometimes it would take weeks or months for t…

Can someone dig out that old agreement to see if Google can be sued big time for this?

I doubt it but I must say it would make me happy and that would be weird because Schadenfreude normally isn't my thing.

Re: Google Safe Browsing can kill a startup

#509
post #478

Earlier quoted context omitted.

There's no reason the number of humans dealing with these problems can't scale alongside the number of humans creating them. But it's a lot cheaper to pay for a few really expensive programmers to make a just-good-enough AI than to pay for thousands of human moderators. So we end up with a stupid computer creating tonnes of human misery all for the sake of FAANG's already fat profit margins.

> There's no reason the number of humans dealing with these problems can't scale alongside the number of humans creating them. I would think the attackers are using automation also, to spam attacks as in other areas of fraud. It can only be a battle of AI ultimately.

Is it just me but the way things are currently stacked, human insight is still the best line of defence? The OP and other anecdotes in the comments are examples why we’re not quite at “AI vs AI” yet

Re: Google Safe Browsing can kill a startup

#510

Earlier quoted context omitted.

The main way is via the Googlebot crawler. They also use user reports from Chrome, and links in "mark phishing" emails from Gmail. Those latter two cases the URL is considered private data, so won't be reported in webmaster tools.

We’ve seen internal firewalled URLs in the webmaster tools, so I’m not sure the private data works as intended.

I've seen some bot of Google's in the server logs on my in-construction not-publicly-available page, a minute after I opened the page in Chrome. That was about five of six years ago, shortly before I stopped using Chrome.
Post reply on HN