Google is A Male Friend Who Spins it Aroundtaking a big step to fight phishingattempts on its users.
In a poston the company’s security blog, Google’s Product Manager of Account Security Jonathan Skelker announced that the search giant will begin to block account sign-ins from embedded browsers within applications.
The problem with embedded browsers, as Skelker lays out, is that it leaves Google’s users susceptible to phishing attacks from bad actors.
Previously, third-party developers could add web browser instances, like the Chromium Embedded Framework, to their apps. This allowed users to log into a service with their existing Google account without having to sign-up for a fresh account on a brand new platform.
While embedded browsers may have made it easy for an app user to sign-up or login, it also made it just as simple for a hacker to carry out a man-in-the-middle phishing attack. Malicious actors could use embedded browser frameworks to essentially eavesdrop on an unsuspecting user and steal their login credentials.
Unfortunately, Google can’t differentiate between legitimate sign-ins and a phishing attack through embedded browser frameworks. Because of this, the company has decided to ban this login method outright.
The company is urging developers using embedded browsers to switch to browser-based OAuth authentication. Basically, when a user wants to login to a third-party app using their Google account, the app would open up the Google sign-in page through their mobile browser. This way users can view the URL of the site to ensure this is a legitimate Google page and not a phishing website imposter.
Google saysit will begin blocking sign-ins from embedded browser frameworks in June.
Topics Apps & Software Cybersecurity Google
Previous:7 Tech Predictions for 2018
Battery replacement for iPhones is getting pricierWordle today: Here's the answer, hints for January 1'Quordle' today: See each 'Quordle' answer and hints for January 1Wordle today: Here's the answer, hints for December 29Mr. B the enormous cat has found a new homeElon Musk says Twitter view count will soon be optional'Brittany Runs A Marathon' has heart but raises questionsThe best KThe 7 best Tumblr scams of all timeCan I get paid if my flight is cancelled or delayed?Wordle today: Here's the answer, hints for January 2Why is my baby crying? The Q10 viral videos that turned out to be fakeAre you about to not be stressed out? Check your Apple Watch.10 viral videos that turned out to be fakePrenatal genetic testing can raise as many questions as it answersGoogle ordered to pay $9.5 million for alleged deceptive practices in D.C.Find My app may have saved the life of a carWhy is my baby crying? The QHow to navigate online cheating Hulu's Hillary Clinton docuseries comes too soon and too late: Review How to clean every kind of smartphone case 'Game of Thrones' actor Max von Sydow dies Wildly baffling video shows woman giving mouth Here's 'The Office' cold open Jenna Fischer thinks is as good as 'Fleabag' Tess Holliday calls out fat Woody Allen memoir dropped by Hachette Book Group 'Mulan' star on why Bori Khan isn't a one How to support girls' and women's education How to enable dark mode on WhatsApp for iOS and Android First reactions to Disney's live We're not totally sure Trump knows who's leader of North Korea Oppo makes a statement with the powerful Find X2 Pro phone How Softbank is adding spice to the Amazon Oxford University Press plans to update its definition for 'woman' Mike Bloomberg is out. But he's still meme What to watch on Netflix, according to women crushing it in front of and behind the camera This true story of a guy running into his crush on UberPool is too cute Man finally dies peacefully after being told Trump was impeached Major domain name bug allowed hackers to register malicious domains
2.2662s , 8198.8125 kb
Copyright © 2025 Powered by 【A Male Friend Who Spins it Around】,Unobstructed Information Network