3 ms·

Also. HOW do you know it’s a real Google sign-in instead of a fake password stealing form? We’ve trained generations of users to accept it’s alright to give th

Also. HOW do you know it’s a real Google sign-in instead of a fake password stealing form? We’ve trained generations of users to accept it’s alright to give their Google/Facebook/Twitter credentials to any random site under the sun.

drivebycomment 6y ago
Only type your Google password if the site is accounts.google.com. https://www.wordfence.com/blog/2017/01/gmail-phishing-data-uri/ https://www.wordfence.com/blog/2017/01/gmail-phishing-data-u... Better yet, use FIDO.