Google no longer providing original URL in AMP for image search results

Re:Google no longer providing original URL in AMP for image ... by A4ET8a8uTh0 on Wednesday May 27, 2020 @11:14AM (#23324576)

So how long until AMP is exploited in a wide range phishing campaign? I know that it is getting harder and harder to distinguish phishing emails from non-phishing emails, but this move is not helping at all. It clearly helps google though.

The annoying thing is, average user will not notice and/or care.

[ Parent | on HN ]

Re:Google no longer providing original URL in AMP for image ... by TechBro8615 on Wednesday May 27, 2020 @11:24AM (#23324722)

All it would require is an AMP website that mimics the Google login page. It already says "google.com" at the top of the browser, and we've told users to trust that, so...

[ Parent | on HN ]

Re:Google no longer providing original URL in AMP for image ... by 8ytecoder on Wednesday May 27, 2020 @12:51PM (#23326096)

I’m surprised this is not widespread yet. Is there anything in AMP to detect and block phishing attempts?

[ Parent | on HN ]

Re:Google no longer providing original URL in AMP for image ... by ValueNull on Thursday May 28, 2020 @05:42PM (#23343088)

The google.com domain would also probably trigger autofill recommendations from some password managers, which would make things even more convincing and seamless.

[ Parent | on HN ]