Earlier quoted context omitted.
The Honda issue where setting a certain radio station, would brick the infotainment? That good enough?
Never heard of this. Link please?
[deleted]
Google flags Immich sites as dangerous
281–290 of 713 posts
Re: Google flags Immich sites as dangerous
#282Ran a clickbait site, and got flagged for using a bunch of 302 redirects instead of 301s. Went from almost 500k uniques a month to 1k. During the appeal it was reviewed from India, and I had been using geoblocking. This caused my appeal to be denied. I ended up deploying to a new domain and starting over. Never caught back up.
Congrats on this great choice of business endeavor
Re: Google flags Immich sites as dangerous
#283Earlier quoted context omitted.
"The people living at this address might be pedophiles and sexual predators. Not saying that they are, but if your children are in the vicinity, I strongly suggest you get them back to safety." I think that might count as libel.
i think it's more akin to "people may have broken in and taken over this house, and within the house there may be sexual predators"
Still asserts that in that house there may be sexual predators. If I lived in that house I wouldnt be happy, and I would want a way of clearing the accusations and proving that there are indeed no sexual predators in my house quicksmart before other people start avoiding it.
Re: Google flags Immich sites as dangerous
#284I've rarely seen a HN comment section this overwhelmingly wrong on a technical topic. This community is usually better than this. Google is an evil company I want the web to be free of, I resent that even Firefox & Safari use this safe browsing service. Immich is a phenomenal piece of software - I've hosted it myself & sung its praises on HN in the past. Put putting aside David vs Goliath biases here, Google is 100%…
> what Immich are doing is extremely dangerous
I've read the article and don't see anything dangerous, much less extremely so. Care to explain?
Re: Google flags Immich sites as dangerous
#285I don't want Google to abuse the world wide web. It is time for real change - a world without Google. A world with less Evil.
Re: Google flags Immich sites as dangerous
#286Re: Google flags Immich sites as dangerous
#287If there are any googlers here, I'd like to report an even more dangerous website. As much as 30-50% of the traffic to it relates to malware or scams, and it has gone unpunished for a very long time. The address appears to be adsense.google.com.
Yeah - that website keeps on spamming me down with useless stuff.
I was able to block most of this via ublock origin but Google disabled this - can not download it from here anymore:
https://chromewebstore.google.com/detail/ublock-origin/cjpal...
Funniest nonsense "explanation":
"This extension is no longer available because it doesn't follow best practices for Chrome extensions."
In reality Google killed it because it threatens their greed income. Ads, ads and more ads.
Re: Google flags Immich sites as dangerous
#288Happened to me last week. One morning we wake up and the whole company website does not work.
Not advice with some time to fix any possible problem, just blocked.
We gave very bad image to our clients and users, and had to give explanations of a false positive from google detection.
The culprit, according to google search console, was a double redirect on our web email domain (/ -> inbox -> login).
After just moving the webmail to another domain, removing one of the redirections just in case, and asking politely 4 times to be unblocked.. took about 12 hours. And no real recourse, feedback or anything about when its gonna be solved. And no responsibility.
The worse is the feeling of not in control of your own business, and depending on a third party which is not related at all with us, which made a huge mistake, to let out clients use our platform.
Re: Google flags Immich sites as dangerous
#289If there are any googlers here, I'd like to report an even more dangerous website. As much as 30-50% of the traffic to it relates to malware or scams, and it has gone unpunished for a very long time. The address appears to be adsense.google.com.
Yeah - that website keeps on spamming me down with useless stuff. I was able to block most of this via ublock origin but Google disabled this - can not download it from here anymore: https://chromewebstore.google.com/detail/ublock-origin/cjpal... Funniest nonsense "explanation": "This extension is no longer available because it doesn't follow best practices for Chrome extensions." In reality Google killed it because…
[flagged]
Re: Google flags Immich sites as dangerous
#290I've rarely seen a HN comment section this overwhelmingly wrong on a technical topic. This community is usually better than this. Google is an evil company I want the web to be free of, I resent that even Firefox & Safari use this safe browsing service. Immich is a phenomenal piece of software - I've hosted it myself & sung its praises on HN in the past. Put putting aside David vs Goliath biases here, Google is 100%…
> what Immich are doing is extremely dangerous I've read the article and don't see anything dangerous, much less extremely so. Care to explain?
They're auto-deploying PRs to a subdomain of a domain that they also use for production traffic. This allows any member of the public with a GitHub account to deploy any arbitrary code to that subdomain without any review or approval from the Immich team. That's bad for two reasons:
1. PR deploys on public repos are inherently tricky as code gains access to the server environment, so you need to be diligent about segregating secrets for pr deployments from production secret management. That diligence is a complex & continuous undertaking, especially for an open source project.
2. Anyone with a GitHub account can use your domain for phishing scams or impersonation.
The second issue is why they're flagged by Google (he first issue may be higher risk to the Immich project but it's out of scope for Google's safe browsing service).
To be clear: this isn't about people running their own immich instance. This is about members of the public having the ability to deploy arbitrary code without review.
---
The article from the Immich team does mention they're switching to using a non-production domain (immich.build) for their PR builds which does indicate to me they somewhat understand the issue (though they've explained it badly in the article), but they don't seem to understand the significance or scope.