Password Alert: a Chrome extension by Google to detect password phishing (opens in new tab)

(googleonlinesecurity.blogspot.com)

11 pointsDrewHintz10y ago3 comments

3 comments

A while ago this was sort of leaked on HN, but someone called it "really unlikely": https://news.ycombinator.com/item?id=8566485 https://news.ycombinator.com/item?id=8566022

Now we've publicly released my project. It's a bit different than most phishing detection -- it detects phishing by noticing where the user has typed their password. Please try it and let me know what you think. The source code is here: https://github.com/google/password-alert It's available in the Chrome Web Store here: https://chrome.google.com/webstore/detail/password-alert/noo...

somerandomness10y ago

Seems like a great feature for Google for Work, although I doubt most folks who get phished would install this extension voluntarily.

DrewHintzOP10y ago

Thanks, that's a fair point. However I've been surprised to see that in well-executed attacks, even the best of us can at least occasionally fall for password phishing.

j / k navigate · click thread line to collapse

3 comments

DrewHintzOP10y ago

A while ago this was sort of leaked on HN, but someone called it "really unlikely": https://news.ycombinator.com/item?id=8566485 https://news.ycombinator.com/item?id=8566022

somerandomness10y ago

Seems like a great feature for Google for Work, although I doubt most folks who get phished would install this extension voluntarily.

DrewHintzOP10y ago

Thanks, that's a fair point. However I've been surprised to see that in well-executed attacks, even the best of us can at least occasionally fall for password phishing.

j / k navigate · click thread line to collapse