A place to discuss the news and latest developments on the open-source browser Firefox
Started this morning. All of my personal tools like nextcloud and RSS reader were blocked, and I had to go manually override that screen for each one. Unacceptable.
Looks like Google is the responsible one, not Firefox. Don't shoot the messenger.
Why is firefox trusting the evil empire to tell it what sites are safe?
Set up google search console for that domain, then it will tell you why it’s blocked. It might be a false positive you can flag, or it might be that a host or service has been compromised or contains something harmful. Google’s blocklist is quite aggressive and often blocks entire domains if one of their subdomains has a violation.
Yeah, people are getting really upset at Google/Mozilla here but SafeBrowsing is actually a very good service. I legitimately believe that it frequently prevents malware infections and phishing on a regular basis. It is also architected with a privacy-first approach that reveals very little data to Google. And the SafeBrowsing privacy policy is actually one of Google's very tight ones.
I think Mozilla made the right choice to enable it by default. They also make it fairly easy to disable this for advanced users under the "Deceptive Content and Dangerous Software Protection" setting. (No need to crack open about:config, disabling it is fully supported.)
I understand that this may be a controversial opinion.
Thank you for the advice!
google owns the internet
I got hit by that, basically forced me to make a Google account and add all my sites to it even though I couldn't care less about SEO and indexing. Now it keeps sending me spam emails about "problems" with my websites. No, I'm intentionally not letting you index this.
What seems to be going on is it's flagging random widespread open-source software as impersonation/phishing login page because it's seen it on a bigger site and assumes you're doing some phishing.
Filed an appeal and it thankfully promptly got resolved. Google ain't known to be friendly to developers.
I want to like that feature because I'm sure it's helpful for the less technically savvy. But I hate that Google can just decide my site is unsafe and essentially cut my sites off the Internet for most people. If Google denies your appeal you have basically zero recourse.
That sucks, yeah. Thanks for sharing, its good to know that its not just me.
Are you using a free subdomain?
I am and have this issue sometimes. What’s the connection / cause?
I imagine that domain is mostly used for spam/phishing sites so Google preemptively blocks all sub domains until they prove they aren't spam. That's one of the shortcomings of using a free domain I guess.
Just get a cheap domain. Free domain will always get flagged, unless it's for a service with no development API. It's too easy as an attack vector, so those free domains often get flagged. If you want to avoid it all together, just get a cheap domain you own and control.
I'm not, I guess I wouldn't be surprised if this happened and I was though. Thanks for the context.
Happend to me recently, with no option to "ignore and continue". I opened the page in private mode and it worked. Weird.
Click “ignore the risk” and it will continue to the page. You better be certain you aren’t being man in the middle attacked though.