Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Don't just shorten your URL, make it suspicious and frightening (2010) (shadyurl.com)
180 points by handpickednames on April 9, 2018 | hide | past | favorite | 68 comments



It was already scary as is. You know, Hacker News.


I have security clearance. This required an interview.

“What forums do you regularly participate in?”

After a raised eyebrow, I had to explain in some detail the meaning of the word ‘hacker’...


Note to self: in similar situations, avoid entering a digression about how the treatment of pg's friend RTM was totally unfair.



"Ycombinator forum" would be good enough I suppose.


Unless it's some government gig, run, don't walk from that job.


I wouldn't expect someone to immediately know about the existence of Hacker News, nor immediately assume "oh they're the good kind of hackers, for sure" when I am sitting in a security clearance interview.

Not knowing these things doesn't make someone incompetent or terrible people---it just means they don't run in the same circles that I do (to note, plenty of good people at Microsoft have never heard of HN, but are still nice enough to work with).


>I wouldn't expect someone to immediately know about the existence of Hacker News, nor immediately assume "oh they're the good kind of hackers, for sure" when I am sitting in a security clearance interview.

It's the tracking and asking you about what you visited part, not the "not knowing about HN" part


Why special case government? Just run.


I mean, I could understand if some military gig or something has such extra demeaning procedures and need for scrutiny...


why?


The URL doesn't say 'hacker news' though. There is a site with that in the name (thehackernews), but the URL for this site is fairly tame.


It took me years to find this site thanks to the URL



You know what's the down side (Good part)? The shortened URL is longer than the original one. LOL.


Oh my, that's absolutely hilarious! Funny little service.


Oh well, FortiGuard didn't like that :D


Blocked by my network's content filter...


This PHP code https://github.com/osteele/wideurl.com/blob/master/wideurl.p... turns e.g. http://osteele.com/archives/2006/04/wideurl into `http:​//w-i-d-e-u-r-l.com/aitch-tee-tee-pea-colon-double-slash-oh-ess-tee-double-ee-ell-ee-dot-see-oh-em-slash-aye-are-see-aitch-eye-vee-ee-ess-slash-two-double-zero-six-slash-zero-four-slash-doubleyou-eye-dee-ee-you-are-ell`.

It was loosely inspired by a BBC broadcast I heard during the very early days of the web. The announcer said something like “If you would like to learn more about this radio program, enter the following into your browser: aitch aitch tee pea colon forwards-slash forwards-slash bee bee see period see oh em forwards-slash — oh, never mind.”

My hosting provider eventually took it down, because URL redirectors can be used for phishing.


> My hosting provider eventually took it down, because URL redirectors can be used for phishing.

What provider was this? I'm going to make sure to never use them. That's not a valid reason at all to take someone's site down, even if it's being actively abused you notify them first and notify them many times before even considering booting them as a customer.


Ha, that's great! Fun idea. I recently made a URL shortening service that generates a random adjective/noun pair, and I specifically looked for a 'clean' set of words. I would've never thought of doing the opposite :) http://shrt-url.azurewebsites.net/ https://github.com/natejenson/url-shortener


I note that "juvenile" and "toucher" are present.


I love that the site itself looks super shady and has no HTTPS


It has a bit of that "90s l337 Winblowz h4xx0r toolz" vibe going on.


The example looks funny but I'm not giving free training to Google's AI just to try it out.


OT: I did, it asked me to select traffic signs. No picture had any. Not marking anything is not an option. So I marked 2 traffic lights and a gas station sign. Accepted. :(


Even random clicking on these "select X" captchas works. You'll just get a longer run around, until AI gets bored and lets you in.

Perhaps it recognizes that being annoyed and a willful breaking of rules are also human qualities.


(offtopic) I just click all the wrong blocks.


Why? Is there really a sizable subset of people out there who willfully screw with these algorithms?


Everywhere I go has it at the moment, but strangely I get the same picture set every time.


Can't actually generate a URL on the site (presumably because everyone's trying at the moment) but it reminded me of https://verylegit.link/ which does something similar.



This is now my preferred choice of URL Shortner for sharing my CV with recruiters.


Did not work on https://losttech.software/stack.html

Looks like an unnecessary restriction on the length of the last piece of domain name.


Seems that it just got hit by the hackernews DoS.


If I remember correctly, the author of this site hangs around here and last time the site came up he had mentioned there used to be a free API but it had to be taken down because of constant abuse by scammers.

Its also possible I'm thinking of another similar site, if that's the case I apologise.


It's slow as mail. I tried an URL several minutes ago and it still hasn't come back.


All the modern SEO-heavy links lend themselves to modification. You can give someone the URL https://www.amazon.com/fnord/dp/0440539811 and he may say "oh, I've read that, fine book" and won't have noticed anything peculiar about the URL.

(Using the male pronoun seems appropriate for that book.)


That's because there isn't anything peculiar about that URL. Are you seeing something in there? Because there isn't anything. Perfectly normal URL.


I think it's the "fnord" part which you can change to whatever you like?

https://www.amazon.com/dont-cause-a-scene-fellas-nothing-to-...


#ThatsTheJoke 'fnord' is supposed to be invisible, and you, the reader, are outstanding in that you are resisting this mind-control and able to see it anyway. It's a reference to the novels linked in in the Amazon link.


Same...I'm thinking thats the point? That url must have some kind of SEO-related optmization that isn't obvious?


Is there an addon that will retrieve the redirects in a "sandboxed" way and then ask you if you want to visit the original URL?

I really dislike when people shorten all their URLs just so they can run statistics on them.


you can't avoid the statistics gathering because you need to contact their server to get the full URL. the best you can do is look for workarounds (goo.gl has a details page if you append .info to the end of a link, not sure whether that gets recorded as a visit). either that, or you have some sort of centralized service that caches short URLs so they only need to be visited once.


I don't really mind being tracked, I'm more interested in knowing what site I'm visiting before I actually visit the site.

Caching short URLs might be problematic when the short URLs are editable, so you might end up with old URLs that are no longer valid.


Confirmed tool's promise: the "shortened" url to my company website has been immediately blocked by our big brother firewall citing internal policy :-)



Site is soo slashdotted right now..


Too bad I am getting 500 Internal Server Error for all URLs I tried.


No https version?


No, because HTTP is shadier.


funny, but seems in the end a damaging joke.


Who is it damaging? I think it's funny, with no caveat.


Nontechnical users whom we are trying to train to parse and understand URLs. And to avoid those which are outside the norm, even when received from known contacts.

"Haha it's just a joke, click it" undermines that. Just like it would dilute an AI's training.


Yes, my point, really anyone who looks at urls if this became prevalent couldn't trust their intuition - maybe trusting intuition isn't a good thing anyway. For some reason though I got minus 4 points for what seemed like a reasonably clear and uncontroversial observation.


I think the whole point of the joke is that URL shorteners have already made it impossible to look at URLs and intuit anything about where they lead and how reliable they are. e.g. the "t.co" through which all twitter links are blinded.


If so, why permit any arbitrary target for this 'joke' tool?

Instead have it resolve all links to a page that says 'don't click on shortened URLs'.

You get your joke and curious recipients get a lesson.

I'm sure this was fun to program but beyond that I don't think it should be disseminated.


Perhaps we should start a rival service.

It gives you urls like https://upstandingcitizenry.com/peace-and-love-and-ponies except instead of redirecting you to a safe URL, it drive-by downloads some malware, fills your screen with porn popups, and uses your CPU for monero mining.

Maybe that would spread your message better?

You obviously don't get the joke. The joke is that it looks shady but is actually perfectly fine. If every URL tells you "don't click on things that look shady", then the joke is gone.


shrug It's the web. Any link can redirect you to any other link.


I didn't get that but it does add another dimension to the joke.


It's just a joke. It's not going to become prevalent, and nobody is going to use it for anything serious.

I don't see any harm in doing things like this.


If the user isn't looking at the URLs then no way a joke like this is going to change heir habits. If anything, they might notice when it's pointed out and they might consider looking at the URLs in the future, though unlikely, as a single experience isn't enough to be habit forming.


probably improve a real AI's training


I think it's rather interesting because you can use it as a canary like service of some sort and plant some shady URLs that lead to unique resources you have logs for.


that sounds interesting but in what scenario would you really use it?


wish it was just shadyurl.com/foo. that’d be delicious. all the obvious text in the url is just sophomoric.


valid opinions get downvoted on HN? that's sad. oh well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: