DrYes@lemmy.world to Lemmy@lemmy.mlEnglish · 2年前the ability to edit titles is great. But the ability to edit the URL of a post is dangerous.message-squaremessage-square18fedilinkarrow-up115file-text
arrow-up115message-squarethe ability to edit titles is great. But the ability to edit the URL of a post is dangerous.DrYes@lemmy.world to Lemmy@lemmy.mlEnglish · 2年前message-square18fedilinkfile-text
I create a well crafted post to a normal site that gets 10.000 upvotes. I change the URL to a malicious site. ??? Profit
minus-squareSalamander@mander.xyzlinkfedilinkEnglisharrow-up1·edit-22年前You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
minus-squaredeweydecibel@lemmy.worldlinkfedilinkEnglisharrow-up1·2年前Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right? And it’s not just about attack vectors, it’s also about stealth ads and misinformation
minus-squareCinner@kbin.sociallinkfedilinkarrow-up3·2年前I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.
You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right?
And it’s not just about attack vectors, it’s also about stealth ads and misinformation
I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.