That's basically it, and this "attack" works perfectly when the web is just HTML and hyperlinks. The remarkable thing is that it still works in the walled gard

That's basically it, and this "attack" works perfectly when the web is just HTML and hyperlinks. The remarkable thing is that it still works in the walled garden of social networks like Facebook, even though their main value-add is that they can stop people abusing the system like this.