3 ms·
It can also... not deliver malware. The point at which it would be of interest to Safe Browsing would be the point at which it starts delivering malware, and re
by danpalmer 3y ago
It can also... not deliver malware. The point at which it would be of interest to Safe Browsing would be the point at which it starts delivering malware, and reporting it before then is only going to create false positives that could make it harder to report if/when it did start distributing malware.
The Safe Browsing project is not about judgement calls on whether a website is a good citizen or not. The whole point is to have a global database of obviously bad stuff that is not about any sort of editorial control, curation, etc. That way it's a clear win for browsers to implement, and there's little criticism that can be levelled against it for preferential treatment etc.
Cloudflare's Radar seems to have a different scope, and may be a more appropriate place to report this site.
- Chabsff 3y agoFraudulently pretending to be a trusted authority (trusted enough to click a download link clears the bar) is sufficient to get flagged as Social Engineering, under the deceptive content category, by Safe Browsing. See https://developers.google.com/search/docs/monitor-debug/security/social-engineering https://developers.google.com/search/docs/monitor-debug/secu...
- danpalmer 3y agoAh, interesting, this is still under Safe Browsing, but it's distinct from the malware reporting that the blog post directs people to. Reports for this would get the site classed as deceptive (which it sounds like it is), but not for malware distribution. That sounds like a good option, perhaps the best option for the Notepad++ blog post to direct people to. Fortunately/unfortunately I still can't load the site on any device or browser so I'm not actually sure what it looks like or how obvious it is.