now every. single. link. on a community slack is potentially unsafe, you need to mouse over it to see where it actually goes.
-
-
Show this thread
-
ok quick update - if you substitute a link naively, slack gives you a warning - they tried hard to cover unicode homographs/confusables - but they missed some, because everyone will always miss some how did we not learn our lesson from phishing and punycode attacks
Show this thread
End of conversation
New conversation -
-
-
apologies to my slack friends (who i adore!) but introducing this without making any distinction between autolinking, and a provided title that happens to be a URL, is so incredibly ripe for abuse
Show this thread -
okay there is apparently a warning when someone tries to rickroll you or worse, but 1) the fact you need a warning is a giant UX red flag 2) "don't show this again"???pic.twitter.com/MRTQQGSUJ9
Show this thread
End of conversation
New conversation -
-
-
It got considered! There's a pop-up warning if the link/text looks like it's tricksy

-
hm people on mobile are reporting no warning, is that unexpected?
- 4 more replies
New conversation -
-
-
and it’s enabled entire industries! (they might not be the industries we wanted though)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
i mean, think of how long it took them to acknowledge that muting/blocking people was a deeply needed feature
-
Is there actually a mute person now? I thought it was only for channels.
- 12 more replies
New conversation -
-
-
You can disable it. Just go to Settings > Security > Rickrollable and toggle it off.
-
Is this a joke? My preferences (desktop) or settings (mobile) do not have a security section.pic.twitter.com/lYw5CKMvQu
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.