Hacker News new | past | comments | ask | show | jobs | submit login

People aren't dumb just because they aren't experts on URLs.

You're creating a false dichotomy.

I am defining "dumb" as "incapable of determining what url they are visiting and therefore vulnerable to scams". That's a looong way from any sane definition of "expert".

Am I dumb to not open the can of oil I put in my car and check whether its heavy metal content is too high to be fresh oil? It's just not practical — if Google can mass-check things for me with TrickURI, it will very likely protect me (a professional programmer) against phishing. Let alone non-web professionals who are nonetheless experts in their field.

I'd rather my doctor and car mechanic and grocer get to focus on their areas of expertise than have to learn some baroque rules about links in their email.

I have no idea about the car oil thing. I don't own a car and rent one when I need one. All aspects of the maintenance and care of any car I might be driving I leave to its owners. Which is not that far from what Google are proposing - that someone else (Google) takes responsibility for the machine we're operating and makes sure it's safe.

The problem, of course, is that this trains us to be incapable, and leaves us incapacitated if anything goes wrong. If my rental car breaks down I have no idea what to do except ring the rental company and hope they can send someone to fix it. Likewise, if Google's filter makes a mistake (which it will) then the user has no ability to make any kind of decision on their own. They'll click on the fake bank, lose all their money, and whose responsibility will that be? Google won't pay them back - they just provided a free tool. The bank will want to shift responsibility ("you must have done something unsafe, Google stops all phishing attempts, so you must have told them your login details"). The net result is that while most people will be safer, some people will be in a worse position than they are now.

It doesn't solve any problems for anyone, it just makes us helpless if there is a problem.

No, but they're at last lazily negligent if they spend a significant part of their day online and still haven't learned how URLs work.

Really? What else should anyone learn in other to use daily? Plumbing, electricity, typography, agriculture, electronics, woodworking, metalworking, law, the list goes on. Do you have a cursory knowledge of all those fields?

> Do you have a cursory knowledge of all those fields?

You don't have a cursory knowledge of everything you use/own and believe it's alright?

Do you know you shouldn't cut your electric wire while having them plugged in?

Do you know you shouldn't put your finger under the knife while you are cutting carrots?

Do you know you shouldn't put metal into your microwave?

You do have cursory knowledge about the tools in your house. You give an absurd list of example in your comment, but theses aren't the tool in your house, they are completely different field that sure are required to give you the tools/food you have, but they aren't part of any of your tool-set required to live. I fully expect someone that use a fountains pens to know how to change its ink cartridge, just like I fully expect a plumber to know how to use a wrench safely and a web user to know how to safely navigate the web.

Sure the tools can be made safer and better, but that doesn't means to remove actual feature from it. You wouldn't make the wrench out of rubber because the metal is too hard and can hurt someone, you expect the wrench user to know it or to teach him if required.

> Do you have a cursory knowledge of all those fields?

Well... yes? Don't you?

Most of that is taught in schools, and I feel one can reasonably expect an adult to have some cursory knowledge about all of the above - enough to at least reason about the basics and to know when to hand a problem off to a professional.

This is dishonest. Things like plumbing, electricity, typography, agriculture, electronics, woodworking, metalworking etc. are the creative acts akin to programming. I did not say they should learn programming.

But you're using a knife daily, so I presume you know what is dangerous about a knife, (not how to make one!), or say you use a credit card. Should you not have at least a vague idea of the concept before you use it responsibly? That's all am asking for.

But if I hire an electrician (or even wire something myself, which I've been known to do) I don't have time to check whether the wires are aluminum instead of copper. Or if their insulation is flame-retardant. I rely on regulations and inspections and even the good will of the manufacturers.

You presumably rely on several indicators that you have learned to look for when doing this type of work. There are several indicators in an URL that indicate the likelihood of it being legit, including proper spelling, valid SSL, reasonable path given the activity etc.

You presumably rely on brands, yes? Same with the URL, make sure it is in fact the 'brand' you're looking for. Am not saying it's 100% foolproof as buying counterfeits isn't hard either. But at least do the bare minimum to check.

Yep, I do make some kind of checks. Mostly I rely on the label and brand though. And TrickURI is a kind of label verifier.

To make sure I'm not accidentally buying H0me D3p0t brand nomex.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact