Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Login screen is showing an odd domain name, apps.googleuserscontent.com, is requesting authorization to my account.

  The site XXXXX.apps.googleusercontent.com is requesting access to your Google Account for the product(s) listed below


That's a Google domain, and the numbers represent a specific Chrome extension... in this case, Streak.


I realize it's a Google domain, but not a trusted Google domain.

If you look at do a search for "googleusercontent.com" it shows that it hosted malware and some other nasty stuff.

  http://www.google.com/safebrowsing/diagnostic?site=googleusercontent.com/

If I'm on streak.com and try to login I would like to be authorizing Streak.com


I understand the sentiment, but it can't work that way. What you're authorizing for access is an anonymous unsigned Chrome extension, not the website streak.com. If they allowed the extension to define its own name so that you'd see "streak.com", then you'd see malware masquerading as safe-sounding names in the authorization dialog.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: