News for hackers. Stuff that matters.

A comment on Soundscapes of the JR Yamanote Line. Parent comment

Re:Soundscapes of the JR Yamanote Line by dontbenebby on Sunday June 26, 2022 @05:06PM (#31887964)
Well if we think the site is a honeypot then I don't know what to tell you at a certain point you need to decide if you're gonna click an unknown link or not, and if you do, engage in harm reduction. I assume many people have used it with no issue if it's on the front page, hence my suggestion to view it with an integrity check.
[ Parent | on HN ]
Re:Soundscapes of the JR Yamanote Line by Cpoll on Sunday June 26, 2022 @06:33PM (#31888770)
> I assume many people have used it with no issue

This is also a dangerous assumption. If 95% of HN is outside of China, they'll have no issue with the website, but that validation is meaningless for the 5% behind the Great Firewall (percentages invented).

> Well if we think the site is a honeypot

That's not the logical assumption to make. A honeypot would have a valid certificate.

A broken certificate simply means either a) the website you are visiting is misconfigured, or b) a third party has intercepted your (possibly you, *personally*, and no-one else) communication with that website. You are not communicating with the website, you are communicating with the 3rd party. This might mean something as stupid as your ISP injecting ads into websites (a thing that happened before https was so prevalent), or it could mean a government-level actor with a more nefarious agenda.

[ Parent | on HN ]