4 ms·
I think they are mimicking the Google Login page and just saving your username/password. Seems damn fishy to me.
by nestlequ1k 14y ago
I think they are mimicking the Google Login page and just saving your username/password. Seems damn fishy to me.
- mukaiji 14y agono. these guys are legit. they work in our sandhill office. They're not out to steal your login credentials.
- drivebyacct2 14y agoIf they're legit, why are they not using oAuth?
- tonyx 14y agoWe are using Google's oauth2 protocol. No user password is stored or even ever transmitted to our server.
- drivebyacct2 14y agoWell I'm not at a Mac so I can't confirm but it's unfortunate to see such misinformation in this thread. I apologize for repeating it, I was too trusting of other comments.
- nestlequ1k 14y agoSince you are framing in the login with webkit, why not show the URL as well? User's need to see htts://google.com or they'll assume it's a phishing attack.
- ryanwaggoner 14y agoHow is this actually any more secure? It's pretty easy to display a legit (but "fake") URL while your phishing form is displayed in the webview.