Bitcoin Forum

Other => Meta => Topic started by: pekv2 on May 30, 2013, 05:48:03 PM



Title: ([color=red]Forum warning: Possible phishing link![/color])
Post by: pekv2 on May 30, 2013, 05:48:03 PM
Is this a new implementation of the forum? I've been seeing this lately today, from quite a different users. Or are posts edited by mods and adding it?

Code:
([color=red]Forum warning: Possible phishing link![/color])

(Forum warning: Possible phishing link!)


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: nibor on May 30, 2013, 05:54:13 PM
Yes I have one!
How do I get rid of it? I did not do anything wrong - it just appeared.


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: tysat on May 30, 2013, 05:54:53 PM
It's automatically done to posts.

This kind of link posting can trigger it:
Code:
[url=www.google.com]www.google.com[/url]

Links posted this way should be fine:
Code:
www.google.com


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: pekv2 on May 30, 2013, 05:55:49 PM
It's automatically done to posts.

This kind of link posting can trigger it:
Code:
[url=www.google.com]www.google.com[/url] ([color=red]Forum warning: Possible phishing link![/color])

Links posted this way should be fine:
Code:
www.google.com

Awesome!


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: theymos on May 30, 2013, 06:33:56 PM
I made it so [url=x]x[/url] doesn't trigger a warning if x is exactly the same in both places.


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: theymos on May 30, 2013, 06:45:59 PM
Actually, I'm just going to remove that warning and make it so:
- [url=https://bitcointalk.org]https://bitcointalk.org[/url] becomes https://bitcointalk.org
- [url=www.google.com]www.google.com[/url] becomes www.google.com
- [url=http://www.google.com]www.google.com[/url] becomes www.google.com
- [url=http://phishing.org]https://bitcointalk.org[/url] becomes https://bitcointalk.org


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: Birdy on May 30, 2013, 09:35:55 PM
Actually, I'm just going to remove that warning and make it so:
- [url=https://bitcointalk.org]https://bitcointalk.org[/url] becomes https://bitcointalk.org
- [url=www.google.com]www.google.com[/url] becomes www.google.com
- [url=http://www.google.com]www.google.com[/url] becomes www.google.com
- [url=http://phishing.org]https://bitcointalk.org[/url] becomes https://bitcointalk.org
So you are removing the url= xy option?
Could be a bit bothersome for really long links.
Maybe the warning for not matching links is the better option.


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: theymos on May 30, 2013, 10:45:09 PM
So you are removing the url= xy option?
Could be a bit bothersome for really long links.
Maybe the warning for not matching links is the better option.

No. It only affects links where the link text would be automatically linkified even without [url]. In these cases, the [url] is either redundant or used to hide the true link destination.


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: dree12 on May 31, 2013, 01:22:05 AM
So you are removing the url= xy option?
Could be a bit bothersome for really long links.
Maybe the warning for not matching links is the better option.

No. It only affects links where the link text would be automatically linkified even without [url]. In these cases, the [url] is either redundant or used to hide the true link destination.

How about:

Code:
[url=x]x[/url]

Gets automatically converted to:

Code:
[url]x[/url]

The issue is that these anti-phishing procedures may not be correct. For example, what about the following:
Quote
Remember to [url=mailto:me@mail.me]mail.me[/url] for more info!

Which is being converted to:
Quote
Remember to mail.me (http://mailto:me@mail.me) for more info!

Which breaks the link!

And also, the procedures can be circumvented by using http://google.com (http://the.iurl.bbcode).


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: whiskers75 on May 31, 2013, 04:10:40 PM
How about:

mtgox.com (http://google.com) (Forum warning: Leads to google.com (http://google.com)!)


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: 🏰 TradeFortress 🏰 on June 01, 2013, 05:28:50 AM
You can get around it:

http://www.google.com (http://phishing.com)


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: rme on June 01, 2013, 07:34:42 AM
https://www.google.com (http://bitcoin.org/)


Title: Re: ([color=red]Forum warning: Possible phishing link![/color])
Post by: dree12 on June 02, 2013, 04:08:05 AM
You can get around it:

http://www.google.com (http://phishing.com)

Even easier:

h​ttp://www.google.com/ (http://phishing.com)

And don't forget:

h​ (http://phishing.com)t (http://phishing.com)t (http://phishing.com)p (http://phishing.com): (http://phishing.com)/ (http://phishing.com)/ (http://phishing.com)w (http://phishing.com)w (http://phishing.com)w (http://phishing.com). (http://phishing.com)g (http://phishing.com)o (http://phishing.com)o (http://phishing.com)g (http://phishing.com)l (http://phishing.com)e (http://phishing.com). (http://phishing.com)c (http://phishing.com)o (http://phishing.com)m (http://phishing.com)/ (http://phishing.com)