1. I create a well crafted post to a normal site that gets 10.000 upvotes.

  2. I change the URL to a malicious site.

  3. ???

  4. Profit

    • Salamander
      link
      fedilink
      English
      4
      edit-2
      1 year ago

      You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.

      • deweydecibel
        link
        English
        21 year ago

        Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right?

        And it’s not just about attack vectors, it’s also about stealth ads and misinformation

        • Cinner
          link
          fedilink
          41 year ago

          I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.

      • @T156
        link
        English
        11 year ago

        However, that also takes money, and effort, which is a reasonable barrier to entry. That was possible on Reddit before, but that it didn’t take would suggest that it was more effort compared to the standard repost bot and all of that.

        Subreddits can also curb things by filtering out unknown sources/domains, or unreliable ones.

        Editing an existing post is a bit less effort, by comparison.