Windows 10: Google won't fix login page flaw that can lead to malware download

Brink · Aug 29, 2016

Google has said it will not fix a potential security flaw that could trick a user into downloading malware from its login window.

The company told security researcher Aidan Woods it "made the decision not to track" his bug bounty submission as a vulnerability.

Woods explained on his blog that Google's login screen allows an app or service to redirect to a page after the user signs in.

The theory goes that an attacker could trick a user into clicking a link that points to a malware file.

But Google said that the redirect page has to fall within "*google.com" domains, limiting its impact.

The problem, said Woods, is that malware hosted on "drive.google.com" or "docs.google.com" which fall within the Google subdomain parameters could still be used to serve up malware, and hide it as a genuine Google login page.

The search giant said in its reply to Woods: "Only first reports of technical security vulnerabilities that substantially affect the confidentiality or integrity of our users' data are in scope, and we feel the issue you mentioned does not meet that bar."

Woods, believing Google didn't fully understand the issue, published the full exchange of emails on his blog.
Click to expand...

Source: Google won't fix login page flaw that can lead to malware download | ZDNet

See also: Aidan Woods - Google's Faulty Login Pages

:)

RC engineer · Aug 29, 2016

Microsoft MSRT fails to download

The link to download the MSRT tool leads to an page not found error both from google search and several links on Microsoft site as well. Whats going on?

**Moved from: (Virus and Malware / Other / Scanning, Detecting, and Removing Threats / Windows 7).**

Kyosu13 · Aug 29, 2016

Wifi login page won't pop up after update

I recently updated my laptop and now it won't connect to my school's wifi or any public wifi. Whenever I try to connect, it doesn't lead me to the login page, but a page that says I need to login to access the wifi, which is what I am trying to do. The
wifi login page was about to load, but then it's redirected to the page telling me I have to login to access the wifi. I've tried solving the problem, but none of the solutions I have found worked. Any suggestions as to how to make the login page pop up?

Windows 10: Google won't fix login page flaw that can lead to malware download

Google won't fix login page flaw that can lead to malware download

Google won't fix login page flaw that can lead to malware download

Google won't fix login page flaw that can lead to malware download - Similar Threads - Google won't fix

Windows won't enter login page

Windows won't enter login page

Windows won't enter login page

Google Lead Services

Google Lead Services

Google Lead Services

Internet login page leads to MSN

Google page

FAKE AD LEADS TO MALWARE SITE