4 ms·

It seems to me that browsers could be smarter about this kind of thing. Like, "Hey, you just put your Gmail credentials into a non-Gmail login form, did you rea

It seems to me that browsers could be smarter about this kind of thing. Like, "Hey, you just put your Gmail credentials into a non-Gmail login form, did you really mean to do that?" Obviously in the HN-type crowd, you know to always carefully check the URL of links and form submissions. But I just don't know how realistic it is for that to be expected of an average user.

plttn 10y ago
There's actually a Google extension[0] for Chrome that does that with your Google account. [0]:https://chrome.google.com/webstore/detail/password-alert/noondiphcddnnabmjcihcjfbhfklnnep https://chrome.google.com/webstore/detail/password-alert/noo...
burkaman 10y ago
That would be tough, because most people use one or two email addresses for basically all their accounts. And unless you're storing all their passwords, which would be a sketchy thing to turn on by default, there's no way to tell if they just put in their Gmail credentials or they really meant to log into gmal.ru. And actually even if you're storing their passwords, a lot (most?) people use the same password for lots of different logins. So I don't think there's a way to consistently do this, unless you combine it with a password manager that guarantees the user isn't duplicating passwords across different logins.
- shawkinaw 10y ago
  Yeah, this specific idea might only work well if you're using a password manager. But it was only an example. It could be something as simple as, "You've never submitted a secure form to this site. Please check the address carefully." If you think it's Gmail, that would be an unexpected alert.
Swizec 10y ago
> Obviously in the HN-type crowd, you know to always carefully check the URL of links and form submissions. But I just don't know how realistic it is for that to be expected of an average user. How often do you actually check super carefully? I'm pretty sure I'm not as careful as I know I should be. Especially when busy and distracted and thinking about other things.
- shawkinaw 10y ago
  I always check email links carefully before clicking them. I'm a little more lax about other ones though :)

plttn 10y ago

There's actually a Google extension[0] for Chrome that does that with your Google account. [0]:https://chrome.google.com/webstore/detail/password-alert/noondiphcddnnabmjcihcjfbhfklnnep https://chrome.google.com/webstore/detail/password-alert/noo...

burkaman 10y ago

That would be tough, because most people use one or two email addresses for basically all their accounts. And unless you're storing all their passwords, which would be a sketchy thing to turn on by default, there's no way to tell if they just put in their Gmail credentials or they really meant to log into gmal.ru. And actually even if you're storing their passwords, a lot (most?) people use the same password for lots of different logins. So I don't think there's a way to consistently do this, unless you combine it with a password manager that guarantees the user isn't duplicating passwords across different logins.

shawkinaw 10y ago
Yeah, this specific idea might only work well if you're using a password manager. But it was only an example. It could be something as simple as, "You've never submitted a secure form to this site. Please check the address carefully." If you think it's Gmail, that would be an unexpected alert.

Swizec 10y ago

> Obviously in the HN-type crowd, you know to always carefully check the URL of links and form submissions. But I just don't know how realistic it is for that to be expected of an average user. How often do you actually check super carefully? I'm pretty sure I'm not as careful as I know I should be. Especially when busy and distracted and thinking about other things.

shawkinaw 10y ago
I always check email links carefully before clicking them. I'm a little more lax about other ones though :)