Hacker News new | ask | show | jobs
by mbreese 4951 days ago
No offense, but I don't what a website to be able to add themselves (or anyone else) to my browser settings with a javascript call. While it may not be a strict security issue, you could imagine an unscrupulous person registering a very similarly sounding name (b1ng.com, or something unicode-y) that could cause confusion. This is especially true when talking about changing your default search engine.

If you really want to tell people how to add your site as their default, then detect Chrome users and tell them how to do it in Chrome. There is no need to blame Google for this - they aren't treating you differently than anyone else, aside from Bing and Yahoo (who are added to the default list).

While I appreciate that other sites are doing this by default without user interaction, this is just ripe for a phishing attack. So, I would assume this will go away soon.