Turn any link into a suspicious-looking one • Hacker News Board

Re: Turn any link into a suspicious-looking one

#81

Post by sleepychu » Sun, Jun 25, 2017, 1:01 PM UTC

OJFord wrote: post #52

If I were trying to send someone to my nefarious website, I'd definitely now wrap the link in this, so that the savvy viewer would think it's a harmless verylegit.link...

You already have that same deal with bit.ly and friends.

http://bit.ly/2saifoB http://bit.ly/2t5xNhB

Which is safe and wonderful and which is dangerous?

Re: Turn any link into a suspicious-looking one

#82

Post by mlacher » Sun, Jun 25, 2017, 1:02 PM UTC

rjbrock wrote: post #10

A similar site has been around for a long time: http://www.shadyurl.com/ example: google.com -> http://www.5z8.info/dogs-being-eaten_x2r3rq_5waystokillwitha...

I made shadyurl! The subdomain feature in this is great. Also cool it has an API. Though with the amount shadyurl was abused by phishers, I'd be interested to see how long an API stays viable.

Re: Turn any link into a suspicious-looking one

#83

Post by btschaegg » Sun, Jun 25, 2017, 1:08 PM UTC

  How does it work?

  Due to rapid advancement in dark ritual technology, 
  the programming community has streamlined the
  Development and deployment of unspeakable 
  eldritch horrors. 

  Using robust open-source libraries like a sack of 
  live geese, websites like this one can be
  developed with far more efficient sacrificial
  rituals than ever before.

  We're still stuck on the version with 
  really inefficient sacrifical rituals 
  though, due to comp͆aͭatib̊i̼͕l̈̿i̮̜t̚y̅ ͊i͋s̾s̢͈͠u̶e̛̊s̼̃.

Not that I'm in need for an URL shortener, but I really like the style it's "advertised" in :-)

Re: Turn any link into a suspicious-looking one

#84

Post by wingerlang » Sun, Jun 25, 2017, 1:26 PM UTC

mamon wrote: post #73

wingerlang wrote: post #59

Earlier quoted context omitted.

As an OSX user, it is fairly amusing when some sketchy ad auto-downloads some "setup.exe" file.

But what if you do the same on Linux, with Wine installed? are you vulnerable the same way Windows users are ? I mean: Wine lets you just double-click exe file to run it.

No idea, however I doubt any Linux user with Wine installed would double click some random setup.exe that was auto downloaded.

Re: Turn any link into a suspicious-looking one

#85

Post by [deleted] » Sun, Jun 25, 2017, 1:29 PM UTC

zeep wrote: post #80

redirect to about:config -> http://hey.look.a.verylegit.link/765ip-stealer_.json.zip and get a Corrupted Content Error (edit: under Firefox)

[deleted]

Re: Turn any link into a suspicious-looking one

#86

Post by carbocation » Sun, Jun 25, 2017, 1:47 PM UTC

mlacher wrote: post #82

rjbrock wrote: post #10

A similar site has been around for a long time: http://www.shadyurl.com/ example: google.com -> http://www.5z8.info/dogs-being-eaten_x2r3rq_5waystokillwitha...

I made shadyurl! The subdomain feature in this is great. Also cool it has an API. Though with the amount shadyurl was abused by phishers, I'd be interested to see how long an API stays viable.

It's kind of wild that "SHADY URL" is something phishers want to use. But, in the end I guess it's all about finding a domain that isn't tied to them?

Re: Turn any link into a suspicious-looking one

#87

Post by Programmatic » Sun, Jun 25, 2017, 1:57 PM UTC

sleepychu wrote: post #81

OJFord wrote: post #52

If I were trying to send someone to my nefarious website, I'd definitely now wrap the link in this, so that the savvy viewer would think it's a harmless verylegit.link...

You already have that same deal with bit.ly and friends. http://bit.ly/2saifoB http://bit.ly/2t5xNhB Which is safe and wonderful and which is dangerous?

RequestPolicy Continued in FireFox, and perhaps other plugins that control/restrict cross-site requests, asks for permission before redirecting to superdodgysite.com and safeandwonderfulsite.com. It's not a feasible solution for the masses, but I really like the control over browsing that it gives.

Re: Turn any link into a suspicious-looking one

#88

Post by bryant » Sun, Jun 25, 2017, 1:58 PM UTC

sleepychu wrote: post #81

OJFord wrote: post #52

If I were trying to send someone to my nefarious website, I'd definitely now wrap the link in this, so that the savvy viewer would think it's a harmless verylegit.link...

You already have that same deal with bit.ly and friends. http://bit.ly/2saifoB http://bit.ly/2t5xNhB Which is safe and wonderful and which is dangerous?

For the uninitiated: just add a + to the end of any bitly URL to expose metrics and preview the destination.

http://bit.ly/2saifoB+ http://bit.ly/2t5xNhB+

Re: Turn any link into a suspicious-looking one

#89

Post by eternauta3k » Sun, Jun 25, 2017, 2:03 PM UTC

carbocation wrote: post #86

mlacher wrote: post #82

Earlier quoted context omitted.

I made shadyurl! The subdomain feature in this is great. Also cool it has an API. Though with the amount shadyurl was abused by phishers, I'd be interested to see how long an API stays viable.

It's kind of wild that "SHADY URL" is something phishers want to use. But, in the end I guess it's all about finding a domain that isn't tied to them?

Similar to 419 scams, shady links/propositions are a good way to select the people who are easy to trick.

Re: Turn any link into a suspicious-looking one

#90

Post by majewsky » Sun, Jun 25, 2017, 2:05 PM UTC

bryant wrote: post #88

sleepychu wrote: post #81

Earlier quoted context omitted.

You already have that same deal with bit.ly and friends. http://bit.ly/2saifoB http://bit.ly/2t5xNhB Which is safe and wonderful and which is dangerous?

For the uninitiated: just add a + to the end of any bitly URL to expose metrics and preview the destination. http://bit.ly/2saifoB+ http://bit.ly/2t5xNhB+

Produces an empty page for me thanks to Noscript. I mean, I'm sort of used to this bullshit by now, but it's particularly egregious since this feature's audience is specifically the tinfoil crowd.