top | item 45649819

(no title)

I'm seeing a lot more of these phishing links relying on sites.google.com . Users are becoming trained to look at the domain, which appears correct to them. Is it a mistake of Google to continue to let people post user content on a subdomain of their main domain?

discuss

userbinator|4 months ago

It's a mistake of Google to obfuscate URLs in their browser so much that it's hard to tell what the actual site is.

I find this 7-year-old comment particularly ironic: https://news.ycombinator.com/item?id=17931747

VladVladikoff|4 months ago

It’s interesting how these big tech companies are playing a role in all these scams. I do a fair amount of paid ads on Facebook, and I get probably about 20 phishing messages a day via Facebook channels; trying to get me to install fake Facebook ads management apps (iOS TestFlight), or leading me to Facebook.com urls that are phishing pages via facebooks custom page designer. These messages come through Facebook, use facebooks own infrastructure to host their payloads, and use language which Facebook would know should only come from their own official channels. How is this not super easy for Facebook to block?? I can only explain it as sheer laziness/lack of care.

jkingsman|4 months ago

Correlated data: sites.google.com has been blocked via machine policy at multiple workplaces I've come into contact with.

spogbiper|4 months ago

the phishers use any of the free file sharing sites. I've seen dropbox, sharefile , even docusign URLs used as well. i don't think you want users considering the domain as a sign of validity, only that odd domains are definitely a sign of invalidity.

newZWhoDis|4 months ago

I get 3-4 fake Docusign emails a week.

rs186|4 months ago

As long as sites.google.com is not blocked by Chrome (which will never happen) or until Google stops making money on them (which won't happen either because spammers are paying for it), Google will continue to run the service.

Apocryphon|4 months ago

RIP the once-common practice of having a personal website (that would have a free host)

foxrider|4 months ago

The "free" hosts were already harbingers of the end times. Once, having a dedicated IP address per machine stopped being a requirement, the personal website that would be casually hosted whenever your PC is on was done.

sunaookami|4 months ago

When you share a link through the Google app it now gets "helpfully" shortened to a "share.google" domain. This is even worse.