4 ms·
Also, it would allow bad actors to just opt out of malware scans - the main vector whereby these insecure URLs were leaked.
by dmurray 3y ago
Also, it would allow bad actors to just opt out of malware scans - the main vector whereby these insecure URLs were leaked.
- fullspectrumdev 3y agoSo there was an interesting vector a while back where some email firewalls would reliably click on any link sent to them that was abused by spammers. Spammers would sign up for services that required a click on a link using blabla@domainusingsuchservice The services bots to check phishing would reliably click on the link, rendering the account creation valid. One particularly exploitable vendor for getting such links clicked was one that shares the name with a predatory fish that also has a song about it :)