How to Avoid Being Caught by Bad Tiny URLs
It seems Bit.ly is now starting to warn visitors using their shortened URLs about bad sites being linked up using their service. This is excellent news and I wish the other website address shortening services would follow suit.
What is the issue, why is it a problem, and what can we do about it?
Website address shortening services came about because some times the page you are visiting can have a URL that is extremely long. If you want to send this web address to a friend over email, internet instant messaging, cell phone SMS text messaging, internet relay chat, or more recently, via a Twitter tweet, these addresses could be so long they either break when the person receiving your link tries to click it, or be so long they are rejected by the service altogether.
So rather than send the exact address that you find in the address bar of your web browser, instead you would copy and paste the address into a URL shortening service that would in turn create a shorter URL for you to use.
When someone then clicks the shorter URL they are “redirected” from the service through to your intended destination.
Sounds good so far, right?
The problem is, when someone sees one of these short URLs, instead of seeing where they will be taken, they see an entirely different address. We can not tell anything from the URL we are given about the nature of where we will be taken.
A safe but annoying example would be for us to be sent a “Rick-Roll”, that is we are given a link that purports to be some breaking news or cool site, only to be taken to the famous Rick Astley YouTube video instead. Ha ha. Got me there.
Rather than safe but annoying, more and more malicious and inappropriate content is being shared this way, spread via spam, trolls, phishing emails, and now Twitter.
You might be sent a message saying “Get a free iPod Touch!!!!”, but when you click the link it takes you to a malware site, or something that you would not want your family or boss to see.
How to Avoid Being Caught Out
- Do not trust email messages or Twitter users that you have not got to know first.
- Log out of important services when not in use, especially Twitter.com – “Cross Site Scripting Attacks” often make use of people being permanently logged in to web services.
- Use TweetDeck or equivalent Twitter desktop tool to avoid Twitter.com and to translate the short URLs back into long URLs
The biggest tip I can give is … If in doubt, do not click!
Obviously the vast majority of links you will come across are going to be safe and harm free, but it does not take much for someone to be given a big problem just by clicking an innocent-seeming link. Better to be safe than sorry, eh?
Got any tips to share? Please let us know in the comments …
Related posts:
- How to Use Google Analytics to Get a Better Picture of Your Twitter Traffic
- Make Your Spreadsheet Into a Custom Feed Reader
- Imagining the Ultimate Computer for Travellers
- Crumb Trail Navigation in WordPress
- Firefox Hacks: URL Keyword Commands
Posted on July 17, 2009 by Chris Garrett
Filed Under Web 2.0
Comments
5 Responses to “How to Avoid Being Caught by Bad Tiny URLs”
Leave a Reply
- The Excel Magician: 70+ Excel Tips and Shortcuts to help you make Excel Magic
- Conversion Central: 101 Tools to Convert Video, Music, Images, PDF and More
- Using Mind Maps for Creativity, Note-Taking and Productivity
- Announcing the Creative Commons PDF Converter
- The Freelancer's Toolset: 100 Web Apps for Everything You Will Possibly Need
- Adobe
- Blogging
- Cogniview
- Collaboration
- Content Licensing
- Copywriting
- Creative Commons
- Enterprise 2.0
- Excel
- Excel Template
- Excel Tips
- Funny
- IT
- Methodology
- Microsoft
- Office 2.0
- Productivity
- Sad
- Series
- Software Tools
- Uncategorized
- Video Tutorials
- Web 2.0
-
Keep this site going
Subscribe with RSS
[...] Be careful about links you click [...]
[...] and any serious URL shortener should have a similar feature soon enough. Read more about this over at Codswallop where our own excellent Chris Garrett is digging into the [...]
Nice tip. There was also a bit.ly preview Firefox plugin that let you hover over a bit.ly link to see its true destination, but it hasn’t been updated to Firefox 3.5 yet.
Also, to avoid Cross Site Scripting attacks, you can install and set the “No Script” Firefox Plugin to allow all scripts (if you don’t want to deal with the annoyance of not having scripts run on all pages). Even when set to allow scripts, there is still protection from cross site scripting attacks.
[...] Be careful about links you click [...]
If you’re using Firefox a good extension is LongURL Mobile Expander. Whenever you however over a shortened URL it will tell you the Title and the long URL of the link.