1. I create a well crafted post to a normal site that gets 10.000 upvotes.

  2. I change the URL to a malicious site.

  3. ???

  4. Profit

    • SalamanderA
      link
      English
      3
      edit-2
      10 months ago

      You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.

      • deweydecibel
        link
        fedilink
        English
        110 months ago

        Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right?

        And it’s not just about attack vectors, it’s also about stealth ads and misinformation

        • Cinner
          link
          fedilink
          310 months ago

          I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.