News for hackers. Stuff that matters.

A comment on Google's login page accepts a vulnerable GET parameter. Parent comment

Re:Google's login page accepts a vulnerable GET parameter by ascorbic on Wednesday August 31, 2016 @06:08AM (#12397202)
Ironically, Chrome is now blocking that as a phishing site!
[ Parent | on HN ]
Re:Google's login page accepts a vulnerable GET parameter by kuschku on Wednesday August 31, 2016 @07:31AM (#12397485)
Yes, and now I have to deal with Google to unblock it.

One of the reasons why I hate automated systems judging things.

Thanks, Google...

[ Parent | on HN ]
Re:Google's login page accepts a vulnerable GET parameter by mentat on Wednesday August 31, 2016 @12:04PM (#12399302)
Please tell me this is sarcasm. The system is working...
[ Parent | on HN ]
Re:Google's login page accepts a vulnerable GET parameter by kuschku on Wednesday August 31, 2016 @01:53PM (#12400148)
The system would be working if it was an actual phishing page.

If it is an example, which is non-malicious, and even says "Don’t enter your password", and doesn’t even store the data from the input fields, it’s not.

It could easily check if any JS is executed, or if the form fields ever get sent anywhere (both is not the case).

[ Parent | on HN ]