Links containing inline spoilers (security for users) - OPSEC & safe practices

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
We Are The Witches

We Are The Witches

True & Honest Fan
kiwifarms.net
Joined
Feb 23, 2019
Kiwifarms allows users to give a blur effect on text, images, links, etc for hiding the content as a spoiler, while still making it slightly visible, like so.

I don't think this has come up yet, but the way in which a link can be taken advantage of by this feature could be problematic for users, making you initially & unknowingly click it because you wanted to see what was in the inline spoiler, but it instead redirected you to a potentially dangerous website, to an IP logger, etc.

Good: the key here is the order of what's within the BBCode; this is a non problematic use of the link + inline spoiler, if you click, the text will be first revealed:
This is a link, click on it!
[ISPOILER][URL='https://www.youtube.com/watch?v=o-YBDTqX_ZU']This is a link, click on it![/URL][/ISPOILER]

Bad: however this one will redirect you when you click it, instead of simply revealing the text first:
This is a link, click on it!
[URL='https://www.youtube.com/watch?v=o-YBDTqX_ZU'][ISPOILER]This is a link, click on it![/ISPOILER][/URL]

Needless to say, clicking links thoughtlessly & without checking what it is first is foolish, but this way is one that's currently possible by taking advantage of the user's assumption of how these features work and carelessness.
 
  • Informative
  • Like
  • Agree
Reactions: King Vidiot, Popper Vowel Race, Nameless One and 41 others
The easy way to tell is to just hover it before clicking, and you'll see if it's the former or latter in the corner of your screen.
1744151533778.png
 
  • Like
  • Agree
  • Informative
Reactions: Nameless One, Whaler, Mortan Shekelstorm and 11 others
DickMain said:
The easy way to tell is to just hover it before clicking, and you'll see if it's the former or latter in the corner of your screen.
View attachment 7195844
Click to expand...
That's the usual way, but I would not be surprised if some user lowered their guard because of the inline spoiler feature.

And we've had an (unsuccessful) attempt at an IP logger recently, but it didn't work simply because of their overwhelming stupidity; this can be done in a more subtle way though, if the target is careless.
 
  • Like
  • Informative
  • Agree
Reactions: Nameless One, 85CentSoda, Dagoth AMOGUS and 1 other person
We Are The Witches said:
That's the usual way, but I would not be surprised if some user lowered their guard because of the inline spoiler feature.

And we've had an (unsuccessful) attempt at an IP logger recently, but it didn't work simply because of their overwhelming stupidity; this can be done in a more subtle way though, if the target is careless.
Click to expand...
what's the lore behind this?
 
DickMain said:
The easy way to tell is to just hover it before clicking, and you'll see if it's the former or latter in the corner of your screen.
View attachment 7195844
Click to expand...
On Mobile the best way is to press and hold over the spoiler it should open a link option box for opening on new tab, etc. still if you fat finger it you could inadvertently open something on your phone.
 
  • Agree
  • Like
Reactions: Whaler, Harvey Danger, Xev and 2 others
Would it be best to just break hyper links that are inline spoilered? I don't see a reason why you would even want to spoiler a link in that way. I can see this possibly being an issue one day.

Private Tag Reporter said:
Neat.
Click to expand...
I didn't know you could change the text color of a link.
DickMain said:
Alex keylogged IP logged people (oops), back in this post he talks about it. You can read about it a bit further down his OP. He failed utterly at it because he's a retard.
Click to expand...
Everyone thought it was Alex at fist. Turned out later it really was some other schizo. They probably would have gotten a bunch of IPs if they did the exploit showed IIT.
 
Last edited:
How did I know it would be Rick Roll lol.

Oh but yes, that’s also cybersecurity 101 to beware of virtually any link. And be aware you’re on kiwi farms which is liable to have knives out everywhere. This is a good reminder and warning.
 
You must log in or register to reply here.
Back