So, I get why you would want to use bit.ly and tinyurl for twitter, but isn't it a bit odd considering your knowledge of XSS?
Daniel Miessler
· 12 months ago
Shane, it all comes down to knowing the source and context of the link you're clicking. I only follow those kinds of links when they are within the context of a trusted environment, like from a friend on Twitter.
I would never click on random links on a page, for example, and especially wouldn't if the destination was obfuscated through a shortening service.
But it's a good question. I use context and source-trust to protect me.
All Comments
It's one of mine as well.
Another to look into is adjix.com
So, I get why you would want to use bit.ly and tinyurl for twitter, but isn't it a bit odd considering your knowledge of XSS?
Shane, it all comes down to knowing the source and context of the link you're clicking. I only follow those kinds of links when they are within the context of a trusted environment, like from a friend on Twitter.
I would never click on random links on a page, for example, and especially wouldn't if the destination was obfuscated through a shortening service.
But it's a good question. I use context and source-trust to protect me.