3 ms·
As an experienced user, when I'm looking for some semi-obscure Windows program, I still do have problems distinguishing legit download links from this. Perhaps
by Piskvorrr 11y ago
As an experienced user, when I'm looking for some semi-obscure Windows program, I still do have problems distinguishing legit download links from this. Perhaps I'm too used to the radical method "just select what you want from the repository, and it will be installed automagically;" in other words, one of the issues here is nonexistent install management in Windows (party like it's 1998!), forcing users to run this gauntlet (MSI? Puh-leeze).
- tdkl 11y agoHovering the link to check the URL is a good old trick. Well until browsers start to hide that as well.
- Piskvorrr 11y agoNice try, but no, that's a broken old trick. window.status is gone for exactly this reason, but things like onclick="this.href=http://evilsite.example/" http://evilsite.example/" (or even onclick="window.location=http://somewhereelse.evil.example/;return http://somewhereelse.evil.example/;return false") still work (link shows a benign location, but it's changed to a malicious one when you click).