"Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. […] Google is, quite literally, hosting phishing attacks on its own infrastructure and not catching them with its own detection tools"

https://www.norn-labs.com/blog/huginn-report-feb-2026

#Google #SafeBrowsing

Huginn Report: February 2026 | Norn Labs

Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. Here's what we found and what it means.

Day 4 again, without any response. Quite a reliable service that: you can rely on it to let you wait. What does that run on, that it takes that long? An Arduino Pico? Needless to say that the alleged malware file does not even exist, and never was malicious.

Filed another review request.

Again: disable that stuff. Seems to have more false positives than real stuff. Especially as entire domains hosting the real stuff (like storage.googleapis.com) are excluded from scan.

#SafeBrowsing #Google

Day 4. A response, finally. The usual clown message: Review failed. Well, the "clown message" is the one in the attached graphic: They don't know themselves. Something something link, but they don't know which. Or, in other words: "These URLs host malware or unwanted software downloads: None". πŸ€¦β€β™‚οΈ

If that's how reliable their services are, maybe they should NOT hold the keys to the entire Internet (and app stores)? πŸ€”

#Google #SafeBrowsing

I had filed a reevaluation request before I tooted this. 2 days later, no reply yet (why does their bot take THAT long?). Instead I hear, another "fine tool" kicked in: Play "Protect" refuses installation of the allegedly malicious app, and even uninstalls them AUTOMATICALLY, without asking you! https://github.com/sunilpaulmathew/AppVaultX/issues/6#issuecomment-4079105010

Another rather questionable tool you might consider to get rid of (unless you install a lot from "questionable sources").

#Google #SafeBrowsing #PlayProtect

Of course the review failed (as usual, without a notification mail). Now they pick random APK files: remove one, then it's the next. Until the repo is empty, I guess. Snippet updated.

Disable "Safe" browsing, it's snake oil as you can see. We've been libeled now many times, always false positives. See https://gitlab.com/-/snippets/4909577#notes-on-how-to-disable-google-safebrowsing-in-browsers-on-android for how to disable it.

Of course all our APKs have been scanned, multiple times, with many engines. They're clean. Says even G's own scanner.

#Google #SafeBrowsing

Netcraft false positives, Google Safebrowsing shenanigans ($4909577) Β· Snippets Β· GitLab

GitLab.com

GitLab

Oh my, those clowns again. They cannot even tell servers apart, but want to play the "Safety Police"? What are they doing for a living, by the way (apart from slurping and selling our data)?

Yes, that's the same file as in January. On a different server. But they flag yet another, that does not even have that file. Incompetent folks, they should shut down that "service". Will they ever stop that nonsense?!?

#Google #SafeBrowsing #failure

Remember our "experience" with Google Safebrowsing in December 2025/January 2026? And that I doubted the "Safe" in its name? Well:

"Google is, quite literally, hosting phishing attacks on its own infrastructure and not catching them with its own detection tools."

Not catching a single one, that is – see the graphic below (hint: red means missed). But they compensate that by flagging safe sides, no worries πŸ€¦β€β™‚οΈ

https://www.norn-labs.com/blog/huginn-report-feb-2026

#Google #SafeBrowsing

@IzzyOnDroid Current Google IzzyOnDroid block status: block still ungoing even though Google literally doesn't list a single "suspicious" URL anymore after we made the false positives unreachable for them.

This is ridiculous. 5 days of almost 1300 clean FOSS apps being blocked by Google for "malware" that doesn't exist. Zero proof, zero accountability, zero recourse.

IzzyOnDroid is clean and we work hard to keep it that way.

#IzzyOnDroid #Google #SafeBrowsing

It's taken them more than 36h to reevaluate their "finding". The files are non-existing for at least 38h. Still: review failed. They now mark us red for a file that does not even exist! How should one trust such a service to be safe – and not just a random annoyance?

Honestly, if it's THAT reliable, rather turn it off. It seems to be rather useless (for you and me), and utilized for censorship (or how else should one understand this?)

#Google #Safebrowsing

Damn, @mozilla is doing everything it can to make good folks hate it 

First Mozilla enables Google Safe Browsing, and then blocks accessing about:config on Firefox Android 

Google is banning @IzzyOnDroid for no good reason, yet I have to jump multiple steps to configure Firefox: that is, first to enable about:config by accessing chrome://geckoview/content/config.xhtml and toggling general.aboutConfig.enable to even access nasty browser.safebrowsing.* settings.

Google is known for breaking antitrust law, this may be yet another case of eliminating alternative app stores from the radar.

Seriously, Mozilla, why you are trying so hard to make everyone hate you?

#mozilla #firefox #google #safebrowsing

IzzyOnDroid βœ… (@[email protected])

Google is now marking EVERY SINGLE APK at our repository as "Malware site issue". Congrats, "Safe" browsing. Of course there is not a single malware there, everything is scanned multiple times. And I bet they excluded *.google.com from their scan or the entire PlayStore would be red by now, too… Calling out to all of you: Please use https://safebrowsing.google.com/safebrowsing/report_error/ to report the links as "safe"! https://apt.izzysoft.de/fdroid/repo/com.apkupdater_52.apk is the one console reports. :boost_love: #serviceToot #izzyOnDroid #fediPower

FLOSS.social