Live data from Hacker News

Google flags Immich sites as dangerous

immich.app

361–370 of 713 posts

Re: Google flags Immich sites as dangerous

#362
post #340

Never host your test environments as Subdomains of your actual production domain. You'll also run into email reputation as well as cookie hell. You can get a lot of cookies from the production env if not managed well.

I think immich.app is the production domain, not cloud?

.cloud is used to host the map embedded in their webapp.

In fairness, in my local testing sofar, it appears to be an entirely unauthenticated/credential-less service so there's no risk to sessions right now for this particular use-case. That leaves the only risk-factors being phishing & deploy environment credentials.

Re: Google flags Immich sites as dangerous

#364

Earlier quoted context omitted.

>Companies get a pass. I'm pretty sure that if Springer were to make a fraudulent ad, they would instantly be slapped with a lawsuit and face public outcry.

Springer itself is nothing but scam.

Which one of the two Springer-s? ;-)

Re: Google flags Immich sites as dangerous

#365
post #171

Earlier quoted context omitted.

Uh… we are. Servo and Ladybird. It’s a shit tonne of work.

Firefox should be on that list. It's clearly a lot closer in functionality to Chrome/Chromium than Servo or Ladybird, so it's easier to switch to it. I like that Servo and Ladybird exist and are developing well, but there's no need to pretend that they're the only available alternatives.

Majority of users are on mobile now, and Firefox mobile sucks ass. I cannot bring myself to use it. Simple things like clicking the home button should take you to homepage, but Firefox opens a new tab. It's so stupid.

Re: Google flags Immich sites as dangerous

#366

Earlier quoted context omitted.

Also YouTube.com serves a lot of scam advertisements. They should block that too.

I think google is crumbling under the weight of their size. They are no longer able to process the requested commercials with due diligence.

> They are no longer able to process the requested commercials with due diligence

no longer able? or no longer willing to, because it impacts their bottom line?

Re: Google flags Immich sites as dangerous

#367

Maybe a dumb question but what constitutes user-hosted-content? Is a notion page, github repo, or google doc that has user submitted content that can be publicly shared also user-hosted? IMO Google should not be able to use definitive language "Dangerous website" if its automated process is not definitive/accurate. A false flag can erode customer trust.

A website where a user can upload "active code". The definition of "active code" is broad & sometimes debatable - e.g. do old MySpace websites count - but broadly speaking the best way of thinking about it is in terms of threat model, & the main two there are: - credential leakage - phishing The first is fairly narrow & pertains to uploading server side code or client javascript. If Alice hosts a login page on alice.…

> what Immich is doing here is extremely dangerous

You fully misunderstand what content is hosted on these sites. It's only builds from internal branches by the core team, there is no path for "external user" content to land on this domain.

Re: Google flags Immich sites as dangerous

#368

Earlier quoted context omitted.

Also YouTube.com serves a lot of scam advertisements. They should block that too.

I think google is crumbling under the weight of their size. They are no longer able to process the requested commercials with due diligence.

Did they ever? They used to only allow text ads, which reduced malware compared to serving random JavaScript. But did they ever vet the ad's content?

Re: Google flags Immich sites as dangerous

#369

Happened to me last week. One morning we wake up and the whole company website does not work. Not advice with some time to fix any possible problem, just blocked. We gave very bad image to our clients and users, and had to give explanations of a false positive from google detection. The culprit, according to google search console, was a double redirect on our web email domain (/ -> inbox -> login). After just moving…

I'm beginning to seriously think we need a new internet, another protocol, other browsers just to break up the insane monopolies that has been formed, because the way things are going soon all discourse will be censored, and competitors will be blocked soon. We need something that's good for small and medium businesses again, local news and get an actual marketplace going - you know what the internet actually promise…

How about the Invisible Internet Project, https://geti2p.net?

Re: Google flags Immich sites as dangerous

#370
post #51
post #32

Tangential to the flagging issue, but is there any documentation on how Immich is doing the PR site generation feature? That seems pretty cool, and I'd be curious to learn more.

It's open source, you can find this trivially yourself in less than a minute. https://github.com/immich-app/devtools/tree/a9257b33b5fb2d30...

If anyone's got questions about this setup I'd be happy to chat about it!
Post reply on HN