DrYes@lemmy.world to Lemmy@lemmy.mlEnglish · 2 years agothe ability to edit titles is great. But the ability to edit the URL of a post is dangerous.message-squaremessage-square19fedilinkarrow-up125arrow-down10file-text
arrow-up125arrow-down1message-squarethe ability to edit titles is great. But the ability to edit the URL of a post is dangerous.DrYes@lemmy.world to Lemmy@lemmy.mlEnglish · 2 years agomessage-square19fedilinkfile-text
I create a well crafted post to a normal site that gets 10.000 upvotes. I change the URL to a malicious site. ??? Profit
minus-squaremorrowind@lemmy.mllinkfedilinkEnglisharrow-up4·2 years agoMost subreddits also blocked redirect links for (partially) reason.
minus-squareSalamander@mander.xyzlinkfedilinkEnglisharrow-up2·edit-22 years agoYou don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
minus-squaredeweydecibel@lemmy.worldlinkfedilinkEnglisharrow-up1·2 years agoSurely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right? And it’s not just about attack vectors, it’s also about stealth ads and misinformation
minus-squareCinner@kbin.sociallinkfedilinkarrow-up3·2 years agoI’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.
Most subreddits also blocked redirect links for (partially) reason.
You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right?
And it’s not just about attack vectors, it’s also about stealth ads and misinformation
I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.