1. I create a well crafted post to a normal site that gets 10.000 upvotes.

  2. I change the URL to a malicious site.

  3. ???

  4. Profit

  • BombOmOm@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    6
    ·
    edit-2
    1 year ago

    The url and title should both be locked after a post. The contents should be free to change, that way updates and such can be posted if necessary.

    Comments can continue to work as-is, there is a similar danger there, but it doesn’t matter nearly as much.

    • CoderKat@kbin.social
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      Titles being editable is really useful. So many posts have misleading titles, causing posts to have to either get removed or flaired (I don’t think we have an equivalent of flairing yet).

      Plus, unless we’re prohibiting editing the body or even comments within posts, it has similar risks to editing the title or URL. Though the post URL is the one most likely to get clicked and thus is the highest risk.

      It is something tooling could help detect. Moderator tools could detect posts changing the URL and flag the post for review. The general idea of spam filters apply well here. Spam filters aren’t just for completely preventing spam, but also for flagging potential spam. We could train spam filters on diffs of comments so that they can recognize when posts seemed to have completely changed in a way that we’d classify as spam.

      • Martineski@lemmy.fmhy.ml
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Yeah, people have really dumb arguments, you can change link in the body anyway so I don’t see how would changing link in the “url” section would be any more dangerous? And if it was actually dangerous then we can just request on github to make it so you need an moderator approval after x time since the post was created without removing the feature completly like fucking idiots suggest. The same goes for changing title, oh, you’re afraid someone may abuse the feature? Then maybe instad of locking the feature we should simply implement public history of changes for titles. Like bruh, people are so dumb to not come up with such basic fixed and instead want to make this platform worse lol.

        And I know I will get downvotes for my attitude but I’m just angry at how people want to remove good popular features on the platform and make it worse for everyone without thinking of ways to make them safe without removing them.