81–90 of 143 posts
Is this some sort of infosec performance art? This seems extremely inadvisable for users or the person running the site. What if someone posts something illegal in the jurisdiction of the viewer or a link to a site with an embedded exploit?
Is it worse than clicking random links on Reddit, other than maybe you can't see the url first?
Also you have zero context and no hive-mind to check the link for you ahead of time.
Earlier quoted context omitted.
Is it worse than clicking random links on Reddit, other than maybe you can't see the url first?
Not seeing the URL is an incredibly huge difference, on average. Also you have zero context and no hive-mind to check the link for you ahead of time.
I knew it was likely to throw me to the wolves.
Earlier quoted context omitted.
I wanted to see the user agent and request headers, since there's another comment about other sites being blocked. I simply looked at basic web server logs. It's a beta site with hardly any traffic, so the only log entries were myself and those from the three users from Urlroulette. I was surprised to see the same IPs were still making requests when I went to close the terminal a while later.
Yeah, log diving is bread and butter, but reading your original comment it sounded like UrlRoulette had some kind of magical feature, where one submits a URL, then gets to see how long the stranger spends on the submitted website. Hence the clarification. It would be an interesting feature actually, though it would probably require some annoying iframe tomfoolery.
Please don't play it.
https://www.engadget.com/2009/09/30/lose-lose-game-deletes-f...
Is this some sort of infosec performance art? This seems extremely inadvisable for users or the person running the site. What if someone posts something illegal in the jurisdiction of the viewer or a link to a site with an embedded exploit?
Earlier quoted context omitted.
Their server could trivially query the url and store the result hash. This would also give a chance to scan for malicious content
> Their server could trivially query the url and store the result hash. I'm not sure what you mean here? I've not seen a site tell you "We don't use this query parameter" if you stick an additional param on there.
Sounds interesting, but I don't want to try it out myself because I know that the internet is dark and full of terrors. Also, I don't want to get Rick-rolled.
You could play a fun game called "PC Roulette" by connecting to a modem and typing the Hayes modem command "A/" to dial the last number somebody called.