Suggestion: Block links from shortening services

[BSMedia]

I suggest prohibiting the use of URL shortening services at vB.org.

URL's that are passed thru these shortening services can contain links to malicious content, spyware, warez and other garbage sites and server no other purpose other than to mask or conceal a links true identity. The propensity of doing bad, far out weighs any positives for using such a service

Not to mention the potential for "marketing gurus" to slide their affiliate links in.

[Marco van Herwaarden]

Personally i tend to agree with your suggestion. We had this discussion within staff some time ago and the result was that it was also used a lot for legit reasons by members and we would be limiting them too much if we would block these.

[Paul M]

Standard links can be used for exactly the same malicious purpose. Its not something unique to short links.

[DeanLag]

But the chances is that shortened URLs containing malicious content are high compared to a standard URL.
Prevention is better than cure.

I personally blacklisted the shortened URLs on my board for the same reason as OP mentionned; even if it never happened before.
Good suggestion OP!

[BSMedia]

Originally Posted by Paul M

Standard links can be used for exactly the same malicious purpose. Its not something unique to short links.

i agree, but then the domain and site thats being linked to isn't masked and we can see where the link goes hence increasing our security and reducing the chance of being taken to a spyware inflicting site

EX: http://thisisabadsite.com/thatinstall/spyware.exe can be made to bit.ly/47cGv and no one will have a clue until people click and are infected

What is one good need for masking URL's on a site like vB.org however. There is no character limitation imposed on the length of posts, so there really isn't a need to hide the actual URL unless it was up to no good.

[Paul M]

On what proof do you base the statement that a short url is any more likely to point to malicious code.

I could just as easily post a link like http://mysite/alink and redirect that to malicious code.

If you dont want to follow such links then fine, thats your choice, I dont see why that should mean we block them.

[BSMedia]

okay.