Live data from Hacker News

A URL shortener not shortening the URL but makes it look very dodgy

github.com

101–104 of 104 posts

Re: A URL shortener not shortening the URL but makes it look very dodgy

#102

I would consider this innovative, but Office365 has had this built in (and as far as I can tell impossible to turn off) for years. What used to be a sensible link turns into a vast "safe link honest, guv" mess. I call it "man in the middle attack as a service"

As a G Suite user, my "favorite" (/s) M365 feature is those "WARNING: EXTERNAL EMAIL" banners. Whenever I'm in an email thread with someone whose company adds those banners, it breaks Gmail's ability to collapse the previous messages at the bottom of the email.

Re: A URL shortener not shortening the URL but makes it look very dodgy

#104

Earlier quoted context omitted.

How about disallowing urls or even just vetting urls in the messages sent from your own service? One of the ones I received was a link to a fake PayPal login that was something along the of lines of (making this up) http://login.PayPal.com.somethingsketchy.biz/login.php and was a replica of the PayPal login screen. It was pretty blatant. Seems like they should figure out a way to avoid that is all, because I know my…

Vetting is impossible, the scammers can just change the content of the page after the PayPal bot requested the website. Human vetting is even more impossible, invoices will always require unique links for each mail. Nor does it matter wherever it's a clickable link or text in this context. The only way to "solve" your issue is by removing user generated content, which makes the invoicing feature inherently impossible…

http://login.PayPal.com.somethingsketchy.biz/login.php

paypal in a URL pointing to a non-paypal domain, no need to load the webpage to flag that.

Post reply on HN