Andreas Baumhof » phishing http://www.tidos-group.com/blog malware research, IT Security and life in general :-) Mon, 16 Nov 2020 18:25:55 +0000 en-US hourly 1 https://wordpress.org/?v=3.9.40 Protection vs Censorship http://www.tidos-group.com/blog/2013/09/27/protection-vs-censorship/ http://www.tidos-group.com/blog/2013/09/27/protection-vs-censorship/#comments Fri, 27 Sep 2013 17:26:04 +0000 http://www.tidos-group.com/blog/?p=502 The title might sound a bit harsh, but with all these “good” people trying to protect you, where is the line between protection and censorship?

Byron Acohido (@byronacohido) just posted this tweet

tweetI personally hate these short URLs, but I thought this sounds interesting. The reason I hate these short URLs is that you don’t know where they take you (this one takes you from bit.ly/1eUu9e2 to t.co/yzm89jFvxS ;-) In this case it leads you to this:

pic1Wow… That’s what I preach almost daily… Watch out what you click on!!! And now I have to be saved by twitter??? Let’s have a look what this page really is all about:

pic2I can confirm that this is neither a “web forgery” or a “phishing site”. It’s also not a “site that downloads malicious software onto your computer”, nor is it a “spam site that requests personal information”. There is no iframe, not even javascript on this page. Only a couple of external references (e.g. youtube)..

Now I don’t care too much about whether TouchID has been hacked yet, but this almost crosses the line for me where twitter’s security team has been a bit too “motivated” to block content that is definitely not malicious.

What’s next? What other pages will be blocked in the name of security?

]]> http://www.tidos-group.com/blog/2013/09/27/protection-vs-censorship/feed/ 0