this post was submitted on 19 Jun 2023
7 points (100.0% liked)

Lemmy

12468 readers
1 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago
MODERATORS
nutomic@lemmy.ml
7
the ability to edit titles is great. But the ability to edit the URL of a post is dangerous. (lemmy.world)
submitted 1 year ago by DrYes@lemmy.world to c/lemmy@lemmy.ml
8 comments fedilink hide all child comments
 

  1. I create a well crafted post to a normal site that gets 10.000 upvotes.

  2. I change the URL to a malicious site.

  3. ??????

  4. Profit

you are viewing a single comment's thread
view the rest of the comments
[–] morrowind@lemmy.ml 1 points 1 year ago (1 children)

Most subreddits also blocked redirect links for (partially) reason.

[–] Sal@mander.xyz 2 points 1 year ago (1 children)

You don't need to use a known redirect link. If the plan begins with a high-quality post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.

[–] deweydecibel@lemmy.world 0 points 1 year ago (1 children)

Surely you don't think that's equivalent to a simple 5 second copy paste of a new URL into the textbox, right?

And it's not just about attack vectors, it's also about stealth ads and misinformation

[–] Cinner@kbin.social 1 points 1 year ago

I'm not sure what you're getting at but he's right, it's incredibly simple to setup a new redirect site.