Hacker News new | past | comments | ask | show | jobs | submit login

Phishing is a big problem for non-technical users. Google's Phishing Quiz (https://phishingquiz.withgoogle.com) is a surprisingly good resource.

Is there a good simple way that someone nontechnical could become confident that withgoogle.com is a trustworthy domain?

I am technical and I am not sure how to become confident that withgoogle.com is a trustworthy domain. I guess I would look for official links from Google.com to it. But why bother?

It's not necessary to confirm that withgoogle is a real Google domain because the page isn't asking for any information.

Of course it could have drive-by malware on it... but so could any link

I think an important part of being secure online is knowing when to be careful. This site doesn't ask for any real information, so it doesn't really matter that much if withgoogle.com is a trustworthy domain or not.

I think it would have been better if this quiz made up a name and e-mail for the user instead of asking for one though.

Very good point. I actually got the link a while back from someone from Google. But what you're saying makes 100% sense! You wouldn't know unless there is a concrete method to verify ownership of the domain.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact