Computer Help and Support

steve2470

(37,457 posts) Tue May 6, 2014, 08:42 AM May 2014

You'll hate Google's experimental Chrome UI, but so will phishers

http://www.theregister.co.uk/2014/05/05/chrome_origin_chip_ui_controversy/

Phishers might have a tougher time hooking victims if a new feature introduced into the experimental strain of Google's Chrome browser makes it into a future full release.

The "origin-chip" feature cleans up Chrome's omnibox – or address bar – by removing lengthy URLs and replacing them with just the domain name shorn of "http://" and "www". There's also the "origin chip" that produces the full URL.

Apple introduced a similar arrangement in Safari on iOS 7.

Google has tested the feature in beta versions of Chrome, but users didn't care for it and it was subsequently relegated to a default "off" state in later updates to the experimental Chrome fork, "Canary".

more at link

9 replies

= new reply since forum marked as read

Highlight:

You'll hate Google's experimental Chrome UI, but so will phishers (Original Post) steve2470 May 2014 OP

No safeguard will stop the ID ten T error. hobbit709 May 2014 #1

K & R hobbit709's post n/t Earth Bound Misfit May 2014 #3

Sounds like a good idea Renew Deal May 2014 #2

Hate it. Developers will too. (I'm not) Earth Bound Misfit May 2014 #4

So you don't have to move your eyes away from what you're reading davepdx May 2014 #5

Thanks for the tip! Earth Bound Misfit May 2014 #6

That's weird how DU is handling "www". Make7 May 2014 #7

yea that is strange about the www thing nt steve2470 May 2014 #8

Antiphishing Feature Fails in Beta Chrome Browser, Security Company Says Earth Bound Misfit May 2014 #9

hobbit709

(41,694 posts)

1. No safeguard will stop the ID ten T error.

Reply to steve2470 (Original post)

Tue May 6, 2014, 09:22 AM

May 2014

which causes about 95% of all problems.

Earth Bound Misfit

(3,554 posts)

3. K & R hobbit709's post n/t

Reply to hobbit709 (Reply #1)

Tue May 6, 2014, 10:05 AM

May 2014

Renew Deal

(81,861 posts)

2. Sounds like a good idea

Reply to steve2470 (Original post)

Tue May 6, 2014, 09:28 AM

May 2014

But I can see why it would be annoying. It sounds like it would be worth doing.

Earth Bound Misfit

(3,554 posts)

4. Hate it. Developers will too. (I'm not)

Reply to steve2470 (Original post)

Tue May 6, 2014, 10:18 AM

May 2014

For new sites/searches I'm constantly looking at the FFox's popup url box at the bottom of browser window (when you hover your pointer on a link) to make sure I'm going to the link I want and am not being redirected somewhere else.

davepdx

(224 posts)

5. So you don't have to move your eyes away from what you're reading

Reply to Earth Bound Misfit (Reply #4)

Tue May 6, 2014, 12:28 PM

May 2014

you might like the following extension for Firefox:

URL Tooltip
https://addons.mozilla.org/en-US/firefox/addon/url-tooltip/

Earth Bound Misfit

(3,554 posts)

6. Thanks for the tip!

Reply to davepdx (Reply #5)

Tue May 6, 2014, 06:13 PM

May 2014

Will give it a whirl.

Make7

(8,543 posts)

7. That's weird how DU is handling "www".

Reply to steve2470 (Original post)

Tue May 6, 2014, 07:01 PM

May 2014

If I put this text in a post:

[div class="excerpt" style="display:inline-block; margin-left:1em; border:1px solid #bfbfbf; border-radius:0.4615em; box-shadow:-1px -1px 3px #999999 inset;"]www

www.

"www"

"www".

www".

www.anything

www"anything

"www"anything

DU gives me this:

[div class="excerpt" style="display:inline-block; margin-left:1em; border:1px solid #bfbfbf; border-radius:0.4615em; box-shadow:-1px -1px 3px #999999 inset;"]www

www.

"www"

"www".

www".

www.anything

www"anything

"www"anything

I guess I should make some comment on the topic of the OP since I'm here...

The WebKit Opera hides the query portion[div style="display:inline; vertical-align:super; font-size:0.7692em;" title=&quot From a question mark to the end, even the anchor portion.)"]1 of the URL in the address bar, and I don't much care for it. Not quite the same as what is described in the OP, but similar enough to know I'd rather see the entire URL displayed. (Although I guess they just added the option to display the entire URL as I was writing this - by which I mean the latest Stable release. Now what am I gonna complain about?)

steve2470

(37,457 posts)

8. yea that is strange about the www thing nt

Reply to Make7 (Reply #7)

Tue May 6, 2014, 07:40 PM

May 2014

Earth Bound Misfit

(3,554 posts)

9. Antiphishing Feature Fails in Beta Chrome Browser, Security Company Says

Reply to steve2470 (Original post)

Thu May 8, 2014, 03:47 AM

May 2014

http://www.cio.com/article/752591/Antiphishing_Feature_Fails_in_Beta_Chrome_Browser_Security_Company_Says

Higbee and Sundhar entered longer and longer domain and subdomain combinations to see how Origin Chip would perform. URLs exceeding 98 characters were not shown by Origin Chip, they wrote.

Origin Chip's reaction to long URLs was also dependent on the size of the browser, they found. Smaller browser windows caused Origin Chip to stop displaying URLs shorter than 98 characters. The behavior means "that even security savvy users who have been trained to recognize malicious URLs will be at risk," Higbee and Sundhar wrote.

One solution may be to keep the whole URL intact and put a visual focus on the root domain, they wrote. "Merely extending the length of the URLs it will display isn't a solution, because attackers will just make URLs as long as they need to be to avoid being displayed."

Reply to this discussion