Hacker News Reader

I've used the Google Voice form they used in their example long ago. It was legitimate and worked just fine.

But I'm not surprised to see some people would use forms on Google Spreadsheets for phishing attacks. Seems ideal.

I have been refraining from doing so as I cannot shake the suspicion that it might be a phishing attack. It doesn't help that most links to it seem to be from Google Groups and other discussion type sites, sometimes posted by people claiming to be Google employees, sometimes not.

Even if it is genuine, it's a bad idea. Someone could make an exact clone of that site, on the same server (simply make a similar Google Spreadsheet) and go fishin'. Only the hash id at the end of the URL would be different.

Reply on news.ycombinator.com