3 ms·
> Serious vulnerabilities include remote code execution... I just meant "serious" in the general sense of the word, like the way that a bullet would in the sto
by mangeletti 10y ago
> Serious vulnerabilities include remote code execution...
I just meant "serious" in the general sense of the word, like the way that a bullet would in the stomach is serious, even though one in the head is more serious.
> Google's core functionality is redirecting users to third party websites
I'm pretty sure that Google's core functionality is ads, which don't require the user to actually be actually visiting pages Google.
Pertaining using Google for social auth, the user is actually expecting to go back to the site they just came from, whereas when they login to update their credit card they're logging in to stay on Google, which means that a page that looks exactly like Google...
How long this functionality remains on the site will be a better indicator. My guess is not long, esp after the publicity.
- dsacco 10y ago>> I just meant "serious" in the general sense of the word, like the way that a bullet would in the leg is serious, even though one in the head is more serious." To continue your analogy more accurately, open redirection is not a gunshot wound, it's a cold.
- parent5446 10y agoI don't know about a cold. Maybe the flu, since elderly and children are more at risk. ;)
- xori 10y agoReally, people. Are we seriously doing this...
- tpaksoy 10y ago>I'm pretty sure that Google's core functionality is ads You have got to be kidding me... So we're completely going to ignore that everyone is still using Google as a search engine, and not ads? You're making things up just to get your point across.
- mangeletti 10y agoMore people see Google ads than any other form of interaction with Google, by a long shot. If you want to talk about Google search, it's obvious, as a user, that when you click a link in the results you're going to be going to the URL that the link points to (even if Google changes the URL when you click it for tracking purposes, there shouldn't be much room for confusion).