5 ms·

These days I never click shortened links without first verifying where it will take me. There is so much malware out there and browsers are nightmarishly insecu

These days I never click shortened links without first verifying where it will take me. There is so much malware out there and browsers are nightmarishly insecure that a single link click could result in a getting completely pwned. Pro-tip: append the “+” character to any bitly link to show the target link without first visiting it. Pro-tip2: consider browsing with JavaScript disabled by default. Enable it on a per-domain basis.

k12sosse 5y ago
I still wouldn't trust the plus character to not fail or whatever one day. I manually expand each short URL I get using various webservices. I'm sure there's an extension for that. I would still just walk to the expander website and paste it in though. You're right. Short URLs are Shite urls.
- CyberRabbi 5y ago
  Another more technical option is to make the request using curl and printing out the “location” header. Can browser extensions make non-redirecting requests and inspect the return headers?
  - Thrymr 5y ago
    There are some browser extensions that do similar things, I'd be interested if there is one that is particularly effective and security focused.
II2II 5y ago
As the article notes, we don't want to socialize people to click on just any link. I never click on links unless I know where it is going to lead me. Shortened links are one example. Even with an accompanying description, it raises red flags. Links to reputable image or video sharing sites without an accompanying description, is another example since you never know what is going to be on the other end.
anderspitman 5y ago
I didn't know about the bitly + trick, thanks.
- Aachen 5y ago
  Works on TinyURL and others too.
XzetaU8 5y ago
Additionally you can add [1]"Actually Legitimate URL Shortener Tool" filter list on uBlock Origin, which is recommended by [2]gorhill [1] https://github.com/DandelionSprout/adfilt/discussions/163 https://github.com/DandelionSprout/adfilt/discussions/163 [2] https://old.reddit.com/r/uBlockOrigin/comments/m5iecq/how_do_i_have_ubo_block_urls_from_loading_that/gr2f9c3/ https://old.reddit.com/r/uBlockOrigin/comments/m5iecq/how_do... Description: In a world dominated by bit.ly, ad.fly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy.

k12sosse 5y ago

I still wouldn't trust the plus character to not fail or whatever one day. I manually expand each short URL I get using various webservices. I'm sure there's an extension for that. I would still just walk to the expander website and paste it in though. You're right. Short URLs are Shite urls.

CyberRabbi 5y ago
Another more technical option is to make the request using curl and printing out the “location” header. Can browser extensions make non-redirecting requests and inspect the return headers?
- Thrymr 5y ago
  There are some browser extensions that do similar things, I'd be interested if there is one that is particularly effective and security focused.

II2II 5y ago

As the article notes, we don't want to socialize people to click on just any link. I never click on links unless I know where it is going to lead me. Shortened links are one example. Even with an accompanying description, it raises red flags. Links to reputable image or video sharing sites without an accompanying description, is another example since you never know what is going to be on the other end.

anderspitman 5y ago

I didn't know about the bitly + trick, thanks.

Aachen 5y ago
Works on TinyURL and others too.

XzetaU8 5y ago

Additionally you can add [1]"Actually Legitimate URL Shortener Tool" filter list on uBlock Origin, which is recommended by [2]gorhill [1] https://github.com/DandelionSprout/adfilt/discussions/163 https://github.com/DandelionSprout/adfilt/discussions/163 [2] https://old.reddit.com/r/uBlockOrigin/comments/m5iecq/how_do_i_have_ubo_block_urls_from_loading_that/gr2f9c3/ https://old.reddit.com/r/uBlockOrigin/comments/m5iecq/how_do... Description: In a world dominated by bit.ly, ad.fly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy.