Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

An example of a link to a GitHub page: http://shrturl.co/VUYHJ. (Original: https://github.com/mozilla/rust/issues/14657 .)

I see that SHRTURL deleted the page title, which users might also notice – but it’s better than keeping the original title, which would now be wrong. SHRTURL also can’t handle GitHub’s custom font with which they render their icons, so the site logo is missing. And you are logged out in the linked page, which is pretty visible, but there’s no way SHRTURL could get around that.



The OP's site is really clever. Your Github page shows that it significantly lowers the barrier to MTM attacks. I wonder what ways there are to protect users against this kind of spoofing.


Check the URL bar carefully?


Indeed, an actual link shortener would show github.com/yada/yada/yada. Since it only redirects you. Notice shrturl.co doesn't.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: