You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
However, that also takes money, and effort, which is a reasonable barrier to entry. That was possible on Reddit before, but that it didn’t take would suggest that it was more effort compared to the standard repost bot and all of that.
Subreddits can also curb things by filtering out unknown sources/domains, or unreliable ones.
Editing an existing post is a bit less effort, by comparison.
You don’t need to use a known redirect link. If the plan begins with a post that obtains 10,000 likes, I am sure the attacker can spend a small amount of effort and register a domain.
Surely you don’t think that’s equivalent to a simple 5 second copy paste of a new URL into the textbox, right?
And it’s not just about attack vectors, it’s also about stealth ads and misinformation
I’m not sure what you’re getting at but he’s right, it’s incredibly simple to setup a new redirect site.
However, that also takes money, and effort, which is a reasonable barrier to entry. That was possible on Reddit before, but that it didn’t take would suggest that it was more effort compared to the standard repost bot and all of that.
Subreddits can also curb things by filtering out unknown sources/domains, or unreliable ones.
Editing an existing post is a bit less effort, by comparison.