this post was submitted on 19 Jun 2023
443 points (99.3% liked)

Sysadmin

7647 readers
1 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
[email protected]
[email protected]
[email protected]
[email protected]

founded 1 year ago
MODERATORS
 

I don't know how to crosspost properly.

I think this is a serious design flaw. If you agree please upvote the post on lemmy.ml community for visibility

all 16 comments
sorted by: hot top controversial new old
[–] njinx 75 points 1 year ago

Yeah this seems like a pretty huge oversight. I'd file an issue on GitHub ASAP.

[–] ilickfrogs 69 points 1 year ago

I hadn't even come across it yet but holy hell that's a scammer/malicious actors paradise.

[–] [email protected] 14 points 1 year ago* (last edited 1 year ago) (1 children)

On Kbin's end the thread ID is 57540 and the appended text is simply a hint to what is on the other side of the link (i.e. it doesn't change anything). This is standard practice and you see it a lot across the web
Try this: https://kbin.social/m/[email protected]/t/57540/THLPFWYHYULHDTPUYWHDUYPHWUDUYWHUYDWHUYWHPD

[–] 18107 17 points 1 year ago* (last edited 1 year ago) (1 children)

StackOverflow had the same feature until people started abusing it for SEO. After that, they decided to remove the option.

[–] lich_hegemon 1 points 1 year ago

Makes sense. SE is profit driven. They want to be at the top of the list when people Google stuff.

For a service like this tho, is that really that big of an issue?

[–] SlappyRedcheeks 7 points 1 year ago

There is also now way to see the underlying url of a hyperlink in the Jerboa app.

[–] CSFFlame 5 points 1 year ago (1 children)

I kinda like it, but it should be operable for the mods (so it flags it for them to check, or whatever automod eventually shows up can hide the post until it's cleared)...

[–] overzeetop 3 points 1 year ago

I like the ability to edit, but agree that some kind of limitations should be on it. Requiring mod review of a URL change would, at least, put one level of check into the system. The other option would be to simply allow only mods to change the URL. That doesn't prevent a bad actor who is a mod, but that seems less likely than a standard user.