this post was submitted on 19 Jun 2023
163 points (99.4% liked)

Lemmy

2172 readers
16 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to [email protected].

founded 4 years ago
MODERATORS
[email protected]
163
the ability to edit titles is great. But the ability to edit the URL of a post is dangerous. (self.lemmy)
submitted 1 year ago by DrYes to c/[email protected]
27 comments fedilink hide all child comments
 

  1. I create a well crafted post to a normal site that gets 10.000 upvotes.

  2. I change the URL to a malicious site.

  3. ??????

  4. Profit

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 3 points 1 year ago* (last edited 1 year ago) (1 children)

Titles being editable is really useful. So many posts have misleading titles, causing posts to have to either get removed or flaired (I don't think we have an equivalent of flairing yet).

Plus, unless we're prohibiting editing the body or even comments within posts, it has similar risks to editing the title or URL. Though the post URL is the one most likely to get clicked and thus is the highest risk.

It is something tooling could help detect. Moderator tools could detect posts changing the URL and flag the post for review. The general idea of spam filters apply well here. Spam filters aren't just for completely preventing spam, but also for flagging potential spam. We could train spam filters on diffs of comments so that they can recognize when posts seemed to have completely changed in a way that we'd classify as spam.

[โ€“] T156 1 points 1 year ago

But at the same time, letting the title be edited can also cause problems later on, especially if it's something that can be used to feign support, or something along those lines, on something a bit more malicious.