Started this morning. All of my personal tools like nextcloud and RSS reader were blocked, and I had to go manually override that screen for each one. Unacceptable.

166 points

Looks like Google is the responsible one, not Firefox. Don’t shoot the messenger.

permalink
report
reply
59 points

Why is firefox trusting the evil empire to tell it what sites are safe?

permalink
report
parent
reply
87 points

Don’t have the funding to themselves, and probably worth it so new users don’t get fucked

permalink
report
parent
reply
17 points

Why does Firefox need to tell Google which sites you’re visiting even if you don’t use Google Search ?

permalink
report
parent
reply
141 points

All checking is done locally on your machine from a hashed list of “bad” domains, your visits aren’t sent to google. You can get the full details here: https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work

permalink
report
parent
reply
63 points

This is a protection mechanism to prevent laymen from falling for scam websites. It is a service offered by Google, enabled by default in Firefox. It can disabled in the configs.

permalink
report
parent
reply
12 points

Are they submitting that to Google or are they subscribing to some hashed list google has of domains with (according to them) know malware, issues, etc?

In that case everything happens on your pc and doesn’t go to google or Mozilla

permalink
report
parent
reply
16 points

Hashed, but there is also a preferences cookie.

Copied from Wikipedia, but the citation is Google’s white paper on this ‘Logs, which include an IP address and one or more cookies, are kept for two weeks and are tied to the other Safe Browsing requests made from the same device.’

permalink
report
parent
reply
-27 points
Deleted by creator
permalink
report
parent
reply
2 points

Not true.

permalink
report
parent
reply
59 points

Set up google search console for that domain, then it will tell you why it’s blocked. It might be a false positive you can flag, or it might be that a host or service has been compromised or contains something harmful. Google’s blocklist is quite aggressive and often blocks entire domains if one of their subdomains has a violation.

permalink
report
reply
45 points

Yeah, people are getting really upset at Google/Mozilla here but SafeBrowsing is actually a very good service. I legitimately believe that it frequently prevents malware infections and phishing on a regular basis. It is also architected with a privacy-first approach that reveals very little data to Google. And the SafeBrowsing privacy policy is actually one of Google’s very tight ones.

I think Mozilla made the right choice to enable it by default. They also make it fairly easy to disable this for advanced users under the “Deceptive Content and Dangerous Software Protection” setting. (No need to crack open about:config, disabling it is fully supported.)

I understand that this may be a controversial opinion.

permalink
report
parent
reply
7 points

Thank you for the advice!

permalink
report
parent
reply

You can just disable Google Safe Browsing in the settings.

permalink
report
reply
38 points

But the problem is the general public. People who have it enabled won’t be able to visit his website.

permalink
report
parent
reply

It doesn’t seem to be a public website

All of my personal tools like nextcloud and RSS reader were blocked

permalink
report
parent
reply
46 points

google owns the internet

permalink
report
reply
34 points

Are you using a free subdomain?

permalink
report
reply
7 points

I am and have this issue sometimes. What’s the connection / cause?

permalink
report
parent
reply
26 points

Reports of individual subdomains that are running shit lead to the main site slowly being pushed to “generally non-safe”.

permalink
report
parent
reply
10 points

This is a crtified .zip moment

permalink
report
parent
reply
14 points

Anyone also using that free subdomain is linked to you because you’re both using the same domain

permalink
report
parent
reply
4 points

Ahhh, that makes sense. Thanks.

permalink
report
parent
reply
12 points

I imagine that domain is mostly used for spam/phishing sites so Google preemptively blocks all sub domains until they prove they aren’t spam. That’s one of the shortcomings of using a free domain I guess.

permalink
report
parent
reply
4 points

That’s one of the shortcomings of using a free domain I guess.

Domains are cheap as dirt for the most part anyways, it’s like 12$/year for a .com if you don’t mind having one of those weirder TLDs I’ve seen those as cheap as 2$/year

2 dollars a year

permalink
report
parent
reply
0 points

Just get a cheap domain. Free domain will always get flagged, unless it’s for a service with no development API. It’s too easy as an attack vector, so those free domains often get flagged. If you want to avoid it all together, just get a cheap domain you own and control.

permalink
report
parent
reply
3 points

I’m not, I guess I wouldn’t be surprised if this happened and I was though. Thanks for the context.

permalink
report
parent
reply

Firefox

!firefox@lemmy.ml

Create post

A place to discuss the news and latest developments on the open-source browser Firefox

Community stats

  • 1.5K

    Monthly active users

  • 926

    Posts

  • 17K

    Comments

Community moderators