4 ms·
So could Twitter make two requests, one as TwitterBot and one anonymously, and then add a warning if they don't go to the same place?
by habosa 5y ago
So could Twitter make two requests, one as TwitterBot and one anonymously, and then add a warning if they don't go to the same place?
- zinekeller 5y agoThat's what Google does sometimes - but it's sometimes considered rude. Plus, anti-bot software may accidentally thwart Twitter's checking bot.
- pornel 5y agoThe attacker doesn't need to detect whether the TwitterBot is making a request. They can redirect every request to the spoofed site after posting the link, until the preview is generated.
- deleted 5y ago[deleted]