Skip to main content

Don't open short URLs if you get from unknown / un-trusted sources!

Many of us on internet have already came across short URLS/links that when clicked take it actual webpage. In many cases you would have wondered what this link is and where is it going to take me?  e.g. http://goo.gl/dFr2Xp which point to my another blog article.



What are short URLs? 

URL shortening is technique used on internet to shorten the long URL/link to a smaller one and that redirects to actual URL when clicked. Its very useful in many cases, e.g. for twitter wherein message length is small and you wish to share a link.  Or you bought a book and it has website references using short URLs.
Long URLs are the way websites are developed and needs extra descriptive parameters and values that needs to be passed. E.g. see URL for this blog above, its the way blogger creates a link based on blog title. By shortening URLs, it becomes easy to pass on and type without errors
 

Advantages it brings in:


  • Short in nature and easy to type in from non-digital media (books, billboards, banners, posters, etc.) 
  • Takes small size and looks neat instead of long URLs 

List of popular services that provide short URL:  

http://bit.ly
http://tinyurl.com
http://goo.gl (From Google)
http://t.co (From Twitter)

Issues due to short URL: 

Don’t know what's hiding behind the short URL: This is one of the most dangerous part of short URLs. It may be a safe link and serves the purpose for you, or it may land up in malware and unwanted websites which you never wished to visit. There is no way for user to know if you may face any issue by clicking a link. This is the main advantage which is exploited by hackers and malware writes to  hide behind a cute looking  URL.  

There has been many more services which has been closed down just due to the fact that users used it extensively to redirect users to po-rn or malicious websites.

If short URL comes from unknown/un-trusted sources, its better to not click/open it.
 
Privacy issue : With four to five major players in this field of short URL, and many websites/users using it, it poses privacy issues to users. Webservers providing short-url can track you as user and collect info about you to know which sites you visit and pass on this info to third-party. It can track your computer address (IP), links you clicked over time and your behavior with short-urls.

TinyUrl.com was known to distribute Spyware: Not all short-URL services are safe and you cannot trust them. Tinyurl.com has been known for distributing spyware as per wikipedia reports. Files may get downloaded automatically as you navigate with short-url and if you open them, it monitors all your actions and note the keys you type in.

Websites have stopped using short url in post: Wikipedia and few more websites have stopped using short-urls due to above reasons. Any short URLs entered get ignored and post cannot be saved.

Solution :


  • Don’t be click master. Avoid clicking on short URL believing everything is going to be safe.  
  • If you get short-URL from unknown/untrusted sources, then better not click it. 
  • Do no click short URLs in SMS, IM, Whatsapp, emails, blogs and Facebook post. 
  • McAfee also offers short-URL service which can be accessed using this link, You can create your own short URLs safely. http://mcaf.ee/ 

Comments

Post a Comment

Popular posts from this blog

Malls track your visits by Wi-Fi tracking

How does Wi-Fi works ?  Wi-Fi is preferred wireless way of internet connectivity on mobile devices. We connect to Wi-Fi at home/office/cafe/Hotels and public places to get fast internet connectivity and do all stuff using it. Usage of Wi-Fi has spread fast with smartphones/tablets as compared to laptops couple of years back. Wi-Fi uses network name (SSID) and shared-password to connect and that makes it easy for users to get internet without much hassle. Once you connect to a network, your mobile device remembers the network and tries to auto-connect to it whenever its available. Mobile devices store all this Wi-Fi network info and use to auto-connect on periodic basis so as to provide preferred connectivity; and all that happens behind the scene. May be its your android/iphone/blackberry/windows phone/tablet all work same way. Your phone tries to connect to Wi-Fi automatically. You can see list of Wi-Fi networks connected by your device going to settings > WiFi Wh...
9 comments
Read more

Use Bookmarks for Bank websites!

Online banking is preferred way for bank transactions and we hardly visit bank building. Most banks do provide android/iphone apps  to take it further. Bank websites are here to stay and do provide rich set of services for customers; and here lies the security issue. You need to protect you identity while logging in and prevent using your credentials on any other fake websites. Use browser bookmarks to open bank website: Always visit your bank using a bookmark on your browser. Simple practice can save your money Never search for bank URL in google or any search engine. You may land up in fake website Never search bank website URL in emails, you might open fraudulent email with URL pointing to site that looks similar to your bank. You may end up entering credentials and give away access to hackers Do NOT bookmark 'Sign in' page as it can change, always bookmark main website of bank e.g. https://www.hsbc.co.in, you can then follow the 'Sign in' page from there. Jus...
Post a Comment
Read more

Securing your account with password only? That’s not enough anymore - Use two-factor authentication

Using userID and password only to login to your account is old method to ensure security to your account(email, bank, facebook, etc.). It has been reported numerous times that passwords can be stolen, leaked, cracked, captured, sniffed & guessed. Bad guys (may be your own people with bad motives) are trying hard to get your password and get into your account to steal data/money/identity/photos. You need to protect your account with something more than just UserID and password. Strong password is not enough to protect your account and you need to go beyond that to make your account secure. What is two factor authentication ? In simple terms you can consider two factor authentication as "Two Locks" for your account. You need to open both the locks before your get into your account. And to open two locks you of course need two separate keys. Two factor authentication is security process in which you use your userID+Password and physical token. Its "something you ...
Post a Comment
Read more