4 ms·

Well, and given recent UI changes to the address bar from both Apple [0] and Google [1] - I'd say that people will begin paying even less attention to URLs. Tr

by kndyry 12y ago

Well, and given recent UI changes to the address bar from both Apple [0] and Google [1] - I'd say that people will begin paying even less attention to URLs. Trolls rejoice. [0] http://appleinsider.com/articles/14/06/04/os-x-yosemite-first-look-safari-8-smart-search-advanced-tab-controls-more http://appleinsider.com/articles/14/06/04/os-x-yosemite-firs... [1] http://www.zdnet.com/google-experimenting-with-hiding-urls-in-chrome-7000029068/ http://www.zdnet.com/google-experimenting-with-hiding-urls-i...

lmm 12y ago
Those changes should make this kind of thing more obvious, not less, unless you can figure out a way to host the altered version on github.com.
- kuschku 12y ago
  Using github.io? As the URL bar loses importance then people will just tend to ignore it, and on first glance (and probably for anyone who's not familiar with github pages) they will both look as valid.
  - icebraining 12y ago
    You can't use github.io, only [project-name].github.io. Sure they could use a fake-but-similar project name, but then again, they already could with github.com/[project-name]. I don't see the big difference for the user.
deleted 12y ago
[deleted]
gohrt 12y ago
Google is hiding PATH not DOMAIN_NAME, which makes this phishing activity EASIER to detect. That's the point of the feature!
- amjd 12y ago
  Except it isn't phishing.
  - eli 12y ago
    That's debatable. I think the only difference is maybe the intent of the attacker?
    - amjd 12y ago
      As I understand it, phishing is when you obtain sensitive information from a user while impersonating a site the user trusts. I don't suppose there's any exchange of sensitive information taking place here (nor is it possible if I am not mistaken, unless the website creator has any bad intent).
laureny 12y ago
Did you mean http://shrturl.co/EPUi5 http://shrturl.co/EPUi5 ?
orthecreedence 12y ago
Removing http:// http:// from the url was bad enough. Now they are going to only show the domain? I'm so glad I don't use chrome anymore. It's this kind of obnoxious "we know better than you and won't let you configure otherwise" bullshit that made me hate it.
- dmpatierno 12y ago
  The chrome setting is behind a config flag.
- Justsignedup 12y ago
  Even if it was customizable, the defaults is something most people don't change. Case and point: IE Toolbars. People hate them but never remove them. Ever. Even as those toolbars are making their browser take minutes to load any page.
  - BrandonLive 12y ago
    That used to be true, but these days IE is pretty aggressive about disabling things, and telling you when they're slowing you down. Doesn't help everyone but seems to help some.
bluthru 12y ago
Why don't they just bold the domain? Chrome sort of grays the rest of the URL, but the difference isn't stark enough.

by kndyry 12y ago

lmm 12y ago

Those changes should make this kind of thing more obvious, not less, unless you can figure out a way to host the altered version on github.com.

kuschku 12y ago
Using github.io? As the URL bar loses importance then people will just tend to ignore it, and on first glance (and probably for anyone who's not familiar with github pages) they will both look as valid.
- icebraining 12y ago
  You can't use github.io, only [project-name].github.io. Sure they could use a fake-but-similar project name, but then again, they already could with github.com/[project-name]. I don't see the big difference for the user.

deleted 12y ago

[deleted]

gohrt 12y ago

Google is hiding PATH not DOMAIN_NAME, which makes this phishing activity EASIER to detect. That's the point of the feature!

amjd 12y ago
Except it isn't phishing.
- eli 12y ago
  That's debatable. I think the only difference is maybe the intent of the attacker?
  - amjd 12y ago
    As I understand it, phishing is when you obtain sensitive information from a user while impersonating a site the user trusts. I don't suppose there's any exchange of sensitive information taking place here (nor is it possible if I am not mistaken, unless the website creator has any bad intent).

laureny 12y ago

Did you mean http://shrturl.co/EPUi5 http://shrturl.co/EPUi5 ?

orthecreedence 12y ago

Removing http:// http:// from the url was bad enough. Now they are going to only show the domain? I'm so glad I don't use chrome anymore. It's this kind of obnoxious "we know better than you and won't let you configure otherwise" bullshit that made me hate it.

dmpatierno 12y ago
The chrome setting is behind a config flag.
Justsignedup 12y ago
Even if it was customizable, the defaults is something most people don't change. Case and point: IE Toolbars. People hate them but never remove them. Ever. Even as those toolbars are making their browser take minutes to load any page.
- BrandonLive 12y ago
  That used to be true, but these days IE is pretty aggressive about disabling things, and telling you when they're slowing you down. Doesn't help everyone but seems to help some.

bluthru 12y ago

Why don't they just bold the domain? Chrome sort of grays the rest of the URL, but the difference isn't stark enough.