# Phishing warnings
**URL:** https://community.metabrainz.org/t/phishing-warnings/405019
**Category:** Development
**Tags:** cover-art-archive, googlechrome, google, browser
**Created:** [November 11, 2018, 2:55am UTC](https://community.metabrainz.org/t/phishing-warnings/405019 "2018-11-11T02:55:08Z")
**Posts on this page:** 20
**Page:** 2
### Author:  [@IvanDobsky](https://community.metabrainz.org/u/IvanDobsky)
#### Post date: [November 21, 2018, 4:29pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/21 "2018-11-21T16:29:20Z")
> [@InvisibleMan78](#):
>
> And Google answers with:
Yeah - we all get that same patronising BS when we fill in the reports.
As this is Google it is all probably being filed away in /DEV/NULL/ but something has to be done. Anyone know any lawyers who can fill in that form and explain that they are accusing the wrong people?
---
### Author:  [@highstrung](https://community.metabrainz.org/u/highstrung)
#### Post date: [November 21, 2018, 9:47pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/22 "2018-11-21T21:47:09Z")
> [@IvanDobsky](#):
>
> It is totally messed up random as to when that warning appears. There is no sensible pattern to it at all.
>
> One visit it is there, next visit it is gone.
On the [https://musicbrainz.org/](https://musicbrainz.org/) homepage, it’s probably triggered by one (or more) of the cover art images in the “Recent Additions” section. Since that section is constantly being updated, it would explain why the warnings come and go.
---
### Author:  [@IvanDobsky](https://community.metabrainz.org/u/IvanDobsky)
#### Post date: [November 22, 2018, 11:03am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/23 "2018-11-22T11:03:29Z")
> [@highstrung](#):
>
> it would explain why the warnings come and go.
I realise it is the links on the front page to the images. What I mean by it’s randomness is there are always links on the front page. Always linking to a small number of servers. Only ever loading an image. Sometimes the warnings appear, other times not even though the images are coming from the same server.
It is _never_ correct in its accusations. Those images, and the way they are loaded, are not going to deliver anything dangerous to you.
I had one warning pop-up on the “My Open Edits” page when the only images in view were ones I had uploaded the day before… 🙄
Their scam warning is not narrow enough. It has no ability to understand the concept of a shared server. So it sees something bad on one little corner of the Wayback Machine and then paints the whole huge server as “bad”. There should be the same warning for anyone visiting GoogleDrive as there are bad things hosted in corners of that too.
---
### Author:  [@Deleted\_Editor\_2049662](https://community.metabrainz.org/u/Deleted_Editor_2049662)
#### Post date: [November 26, 2018, 12:56am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/24 "2018-11-26T00:56:15Z")
So who are we supposed to ask to have the recently added section and all CAA images removed from the main page ?
---
### Author:  [@Freso](https://community.metabrainz.org/u/Freso)
#### Post date: [November 26, 2018, 6:25am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/25 "2018-11-26T06:25:59Z")
You’re supposed to file a ticket under [https://tickets.metabrainz.org/projects/MBS](https://tickets.metabrainz.org/projects/MBS) if you have something you wish to see changed on [https://musicbrainz.org/](https://musicbrainz.org/)
---
### Author:  [@jesus2099](https://community.metabrainz.org/u/jesus2099)
#### Post date: [November 26, 2018, 6:35am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/26 "2018-11-26T06:35:56Z")
Oh yes we could trick the **homepage** by showing the Amazon image for the new releases that have both a CAA **and** an Amazon link.
**Recent Additions** are already a filtered down list anyway.
---
### Author:  [@IvanDobsky](https://community.metabrainz.org/u/IvanDobsky)
#### Post date: [November 26, 2018, 12:35pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/27 "2018-11-26T12:35:36Z")
> [@therealdero](#):
>
> So who are we supposed to ask to have the recently added section and all CAA images removed from the main page ?
But that won’t solve it for the other pages that display images. It is just delaying the point someone would see the warning message.
This has to be hassled at the Google end. That is where the real issue lies.
And please - no Amazon images. Most of the time when I login there are unusual images being shown that are unlikely to be on Amazon. Saw someone uploading a bunch of old Punk Cassettes the other day. It is quite an enjoyable feature seeing a random selection of images that I wouldn’t normally ever see.
---
### Author:  [@yvanzo](https://community.metabrainz.org/u/yvanzo)
#### Post date: [November 27, 2018, 2:10pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/28 "2018-11-27T14:10:29Z")
This issue has been [discussed in weekly meeting yesterday](https://chatlogs.metabrainz.org/brainzbot/metabrainz/msg/4288792/). Everyone agreed on temporarily hiding cover art on the homepage from Chrome-based browser. But I cannot reproduce the issue.
For example, the above mentioned server `ia601506.us.archive.org` still _contains harmful content_ [according to Safe Browsing](https://transparencyreport.google.com/safe-browsing/search?url=http:%2F%2Fia601506.us.archive.org), but including [cover art hosted on it](https://ia601506.us.archive.org/6/items/mbid-3f37c2b7-9725-4d3e-9293-608d3e264f6e/mbid-3f37c2b7-9725-4d3e-9293-608d3e264f6e-21544183064_thumb250.jpg) doesn’t trigger any alert.
Is the issue still current? Or does it only happen on the homepage? Anyone facing this issue again, please report the list of recent additions (with links or MBIDs) present on the homepage at that time.
---
### Author:  [@jesus2099](https://community.metabrainz.org/u/jesus2099)
#### Post date: [November 27, 2018, 2:16pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/29 "2018-11-27T14:16:12Z")
I use Vivaldi, based on Chrome.
I only had this problem for one day maximum, but maybe I did check a box saying « don’t bother me again for this site, I trust it. » ?
* * *
6 minutes later:
How ironic, as soon as I thought I did not have this at all for days and days, I go to [a random release and then click on its 16th track’s recording](https://musicbrainz.org/track/cde23eb4-e80a-3eab-906c-a55a1c713f8f) (try it, click that recording) and got that dreaded red screen of hell, again!
Actually I am using FUNKEY CAA user script that shows me all those release cover arts.
Without user script, you might have to locate which of those releases does trigger the google red screen of hell.
Then I clicked on _visit this **unsafe** site_ and indeed I am no longer warned.
It may have stored my wish to visit this (ahem) unsafe site for a week or two.
---
### Author:  [@yvanzo](https://community.metabrainz.org/u/yvanzo)
#### Post date: [November 27, 2018, 3:42pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/30 "2018-11-27T15:42:58Z")
Thank you, I cannot get the same _dreaded red screen of hell_ even after visiting every of those releases, but at least **you confirmed the issue is still current**. I just filed [MBS-9930](https://tickets.metabrainz.org/browse/MBS-9930). There is no way to reliably reproduce the issue as each CAA item may be available from more than one IA server.
---
### Author:  [@IvanDobsky](https://community.metabrainz.org/u/IvanDobsky)
#### Post date: [November 27, 2018, 5:18pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/31 "2018-11-27T17:18:16Z")
Please don’t hide coverart on the front page. That really won’t solve much. And just make a more boring page to visit.
Better to start TALKING about it on the home page. Warn people of the bogus warning messages and that they need to visit Google and complain complain.
Like @jesus2099 I am also using Vivaldi and the warning can pop up randomly all over the place. And then disappear just as suddenly.
The stupid Google system does not understand that SHARED use servers are SHARED.
---
### Author:  [@reosarevok](https://community.metabrainz.org/u/reosarevok)
#### Post date: [November 27, 2018, 5:28pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/32 "2018-11-27T17:28:05Z")
> [@IvanDobsky](#):
>
> Better to start TALKING about it on the home page. Warn people of the bogus warning messages and that they need to visit Google and complain complain.
That doesn’t help if they never make it to the home page before the red screen of scare appears. That’s why it makes sense to hide cover art there specifically (and mention why: “Cover art is temporarily disabled on Chrome because of this issue, complain here!”), and let it be elsewhere on the site, where hopefully people will now know the warning should be ignored.
---
### Author:  [@IvanDobsky](https://community.metabrainz.org/u/IvanDobsky)
#### Post date: [November 27, 2018, 5:43pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/33 "2018-11-27T17:43:37Z")
> [@reosarevok](#):
>
> (and mention why: “Cover art is temporarily disabled on Chrome because of this issue, complain here!”)
Yes. Now that makes more sense. Chrome Only warnings. Maybe a dirty great big Green and Orange pop-up box that says “_Your copy of Chrome is lying to you. Complain to Google if you want your pretty pictures back_”. 😉
Then add links to “Download Firefox here”
That should help get their attention 😃
---
### Author:  [@Billy\_Yank](https://community.metabrainz.org/u/Billy_Yank)
#### Post date: [November 28, 2018, 3:38am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/34 "2018-11-28T03:38:26Z")
I just got the phishing warning immediately when I uploaded a new cover.
---
### Author:  [@jesus2099](https://community.metabrainz.org/u/jesus2099)
#### Post date: [November 28, 2018, 10:59am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/35 "2018-11-28T10:59:42Z")
Were you able to end the upload process properly?
---
### Author:  [@Billy\_Yank](https://community.metabrainz.org/u/Billy_Yank)
#### Post date: [November 28, 2018, 2:27pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/36 "2018-11-28T14:27:34Z")
Yes, the warning came after the edit completed and MB tried to redisplay the page. It’s still giving me the red screen on that image this morning.
---
### Author:  [@jesus2099](https://community.metabrainz.org/u/jesus2099)
#### Post date: [November 28, 2018, 3:12pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/37 "2018-11-28T15:12:47Z")
I got it for `ia902900.us.archive.org` server now.
I should have noted the other warnings I got because I think each time there is a new supsected server, I get a new message.
---
### Author:  [@michelv](https://community.metabrainz.org/u/michelv)
#### Post date: [November 28, 2018, 4:57pm UTC](https://community.metabrainz.org/t/phishing-warnings/405019/38 "2018-11-28T16:57:20Z")
> I got it for `ia902900.us.archive.org` server now.
I’m still glad I am using Firefox.
> **[How does built-in Phishing and Malware Protection work? | Firefox Help](https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work)**
>
> Firefox contains built-in Phishing and Malware Protection to help keep you safe online. This article explains how they work.
---
### Author:  [@aerozol](https://community.metabrainz.org/u/aerozol)
#### Post date: [November 29, 2018, 3:44am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/39 "2018-11-29T03:44:06Z")
> [@yvanzo](#):
>
> Is the issue still current?
Getting it on this page: [Edits for Ty Segall - MusicBrainz](https://musicbrainz.org/artist/07a17571-81fc-4cf8-a634-98f0d926d313/edits)
---
### Author:  [@IvanDobsky](https://community.metabrainz.org/u/IvanDobsky)
#### Post date: [November 29, 2018, 10:55am UTC](https://community.metabrainz.org/t/phishing-warnings/405019/40 "2018-11-29T10:55:12Z")
> [@Billy\_Yank](#):
>
> I just got the phishing warning immediately when I uploaded a new cover.
Ah - so you’re the one uploading dodgy images. 🤣 Maybe this is Google doing quality control… or just trying to stop people uploading to non-Google servers. Stick the _Google “knows all” Analytics_ back on and the warnings will stop. This is Google Mafia…
Found the problem on the server. Clearly Google has found this:
[https://musicbrainz.org/release/e0412191-2da3-4166-b91b-8afd7c732efe](https://musicbrainz.org/release/e0412191-2da3-4166-b91b-8afd7c732efe)
Would it help if we started listing the servers we get warned about? Though I notice most technical conversations about this say Google refuses to ever tell the server owners where the suspect files are.
[Previous page](https://community.metabrainz.org/t/phishing-warnings/405019.md?page=1)
[Next page](https://community.metabrainz.org/t/phishing-warnings/405019.md?page=3)