31–40 of 165 posts
This feels like it could be an attack vector. Gather intel on what the user agent is, nmap the IP, possibly find a vulnerability in the parser or the server.
I doubt the downloader isn't restricted in some kind of jail.
Could someone effectively DOS another site using this method by including a bunch of links that generate a lot of load? Would be interesting to see if Facebook has a maximum number of links it'll follow.
This feels like it could be an attack vector. Gather intel on what the user agent is, nmap the IP, possibly find a vulnerability in the parser or the server.
I doubt the downloader isn't restricted in some kind of jail.
A good way to enable delivery tracking for PDFs over messenger, I guess!
Earlier quoted context omitted.
That would let people leave the Facebook platform and explore the open web.
I remember the sheer awe when I first learned there was a huge open web outside of AOL. I'm sure people nowadays are aware of the rest of the web, but if the draw is minimal, they will likely get stuck in the same loops of well-trodden space.
I’ve had Facebook block several links sent in private message groups, to completely legal and safe sites (Messenger prints out an obscure API error and refuses to send the content). They have done this for a long time.
Earlier quoted context omitted.
I doubt the downloader isn't restricted in some kind of jail.
You'd think... but after that story about Microsoft just executing random threatening code it found on someone's computer and allowing it access to the internet, I have to question some of the wisdom these big companies show.
Thinking that you can make an HTTP request using this method and that that means you can unleash a DoS is... worth a try, but not something you can take for granted.
Earlier quoted context omitted.
As always in big tech, you're damned if you do and damned if you don't.
Oh, I don’t know. I refuse to use Facebook Messenger and I have yet to be damned (at least to my knowledge)!
Could someone effectively DOS another site using this method by including a bunch of links that generate a lot of load? Would be interesting to see if Facebook has a maximum number of links it'll follow.
The cost of uploading a PDF of links is probably not much less than the cost of following those links on your own. So I don't think you gain much by leveraging Facebook in this case.
https://news.ycombinator.com/item?id=1
https://news.ycombinator.com/item?id=2
https://news.ycombinator.com/item?id=3
and so on, until 10,000,000? Perhaps Facebook starts opening every link using 10,000 parallel threads. Can you really replicate that from your connection at home? Perhaps even the sysadmin of your victim site has whitelisted all Facebook IP addresses so their crawlers get a free ride.