DrYes@lemmy.world to Lemmy@lemmy.mlEnglish · 1 year agothe ability to edit titles is great. But the ability to edit the URL of a post is dangerous.message-squaremessage-square11fedilinkarrow-up116arrow-down10file-text
arrow-up116arrow-down1message-squarethe ability to edit titles is great. But the ability to edit the URL of a post is dangerous.DrYes@lemmy.world to Lemmy@lemmy.mlEnglish · 1 year agomessage-square11fedilinkfile-text
I create a well crafted post to a normal site that gets 10.000 upvotes. I change the URL to a malicious site. ??? Profit
minus-squaremorrowind@lemmy.mllinkfedilinkEnglisharrow-up1·1 year agoMost subreddits also blocked redirect links for (partially) reason.
minus-squareSalamander@mander.xyzlinkfedilinkEnglisharrow-up2·1 year agoYou don’t need to use a known redirect link. If the plan begins with a high-quality post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
minus-squaredeweydecibel@lemmy.worldlinkfedilinkEnglisharrow-up1·1 year agoSurely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right? And it’s not just about attack vectors, it’s also about stealth ads and misinformation
minus-squareCinner@kbin.sociallinkfedilinkarrow-up1·1 year agoI’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.
Most subreddits also blocked redirect links for (partially) reason.
You don’t need to use a known redirect link. If the plan begins with a high-quality post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right?
And it’s not just about attack vectors, it’s also about stealth ads and misinformation
I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.