News for hackers. Stuff that matters.

A comment on Hacking Gmail’s UX with 'From' Fields – Another Phishing Vector. Parent comment

Re:Hacking Gmail’s UX with 'From' Fields – Another Phishing ... by sazfedjhrgnukc on Wednesday November 14, 2018 @06:00PM (#18455036)
> ... and it's still not fixed

It was fixed in May: https://www.xda-developers.com/google-fixes-flaw-spoof-inbox...

[ Parent | on HN ]
Re:Hacking Gmail’s UX with 'From' Fields – Another Phishing ... by Sephr on Wednesday November 14, 2018 @06:33PM (#18455305)
It was only fixed in the webapp. As you can see with the PoC demo link, this is still unfixed in the Inbox app for Android.
[ Parent | on HN ]
Re:Hacking Gmail’s UX with 'From' Fields – Another Phishing ... by sazfedjhrgnukc on Wednesday November 14, 2018 @07:00PM (#18455506)
Thanks for clarifying. I should've been able to deduced that it was only fixed in the webapp from the "open on Android using Google Inbox or Gmail" part of your comment. I'm sorry.
[ Parent | on HN ]