5 ms·
Correct me if I'm wrong, but won't this just result in more sophisticated phishing technology? Google can't, as far as I'm aware, inherently block frameworks fr
by rbongers 8y ago
Correct me if I'm wrong, but won't this just result in more sophisticated phishing technology? Google can't, as far as I'm aware, inherently block frameworks from spoofing whatever information they want, even if they have some form of limited control with Chromium-based solutions. That's not to say that this won't slow down phishing for a while, I'm just wondering if there's any more to this.
- theamk 8y agoI think the point is to allow google to block more. Before, Google could not block too much because it would break legitimate apps. Now that those apps are officially not allowed, Google can keep locking down their login systems.
- dpacmittal 8y agoThey could just use puppeteer? I don't see mention of puppeteer anywhere. Even if they block puppeteer, hackers could create a chrome extension to automate the login flow presenting the victim with phishing page for each step of the login flow.