Re:American Chemical Society bans university after "spider-t...
by Kliment on Friday April 04, 2014 @08:39AM
(#7530927)
Note how this means that anyone who is tricked into clicking that link has just blacked-out their entire institution. This has massive potential for abuse.
[ Parent
| on HN ]
Re:American Chemical Society bans university after "spider-t...
by danieltillett on Friday April 04, 2014 @08:46AM
(#7530968)
I almost wish I was back at uni so I could have some fun with this.
Re:American Chemical Society bans university after "spider-t...
by Kliment on Friday April 04, 2014 @09:01AM
(#7531045)
Spam every academic email with link to "I thought you might find this paper interesting", lockout every university in the world? It only takes one click by one unsuspecting victim per institution. I wonder what would happen if someone includes that DOI in a publication reference. Watch which institutions go dark, and you know who is doing your blind review.
Re:American Chemical Society bans university after "spider-t...
by tedks on Friday April 04, 2014 @11:01AM
(#7531787)
Undergrads won't open that link, and grad students and faculty are too busy.
To really do damage, you need to create something that'll go viral, and piggyback the link on it. Undergrads will click anything that looks fun. Make it look fun and you're golden.
Re:American Chemical Society bans university after "spider-t...
by MichaelGG on Friday April 04, 2014 @08:24PM
(#7535364)
You wouldn't need to click the link. Just include it on another page as an img src. Right?
Re:American Chemical Society bans university after "spider-t...
by userbinator on Saturday April 05, 2014 @08:56AM
(#7536903)
Things like signatures on forums visited by university students are the first to come to mind. Embed it through one of the many referer-stripping redirectors out there, and none could be the wiser...
Re:American Chemical Society bans university after "spider-t...
by mikeash on Friday April 04, 2014 @12:35PM
(#7532558)
If you're up for a little fraud, get a list of faculty and undergrad e-mails and send e-mails to undergrads purporting to be from faculty saying, "Please read this and be ready to discuss in class on Monday." The hit rate will be low, but you're bound to get a few students who really do have that professor's class on Monday and will click it.
Re:American Chemical Society bans university after "spider-t...
by ams6110 on Saturday April 05, 2014 @02:22AM
(#7536169)
Send it to the adminstrative staff then, they spend about 50% of their day surfing.
Re:American Chemical Society bans university after "spider-t...
by danieltillett on Friday April 04, 2014 @09:26AM
(#7531190)
Yep - the naughtiness you could get up to with this is almost endless. I get the feeling that this will not be with us for much longer as every university in the world is about to get locked out.
Re:American Chemical Society bans university after "spider-t...
by dsl on Friday April 04, 2014 @09:54AM
(#7531380)
That isn't true. http://blog.codinghorror.com/preventing-csrf-and-xsrf-attack...
Re:American Chemical Society bans university after "spider-t...
by tghw on Friday April 04, 2014 @10:41AM
(#7531659)
You're assuming the creator of the spider trap also put in CSRF protections. However, if you read the article, you'll see that it is only a link, with no CSRF protection at all. Therefore, it is quite true that spamming research mailing lists could lock a lot of people out. In fact, since this spider trap is triggered on a GET request, you would just need to embed the link as an image, script, or stylesheet and get the target to visit a page.
Re:American Chemical Society bans university after "spider-t...
by yahelc on Friday April 04, 2014 @12:17PM
(#7532401)
You could even embed the URL as an image in the email, and if images are enabled, it would trigger a GET request.
Re:American Chemical Society bans university after "spider-t...
by naich on Friday April 04, 2014 @10:24AM
(#7531563)
They have posted a reply here: http://www.asihcopeiaonline.org/doi/pdf/10.1046/9999-9999.99...
Re:American Chemical Society bans university after "spider-t...
by nitrogen on Friday April 04, 2014 @12:20PM
(#7532429)
That looks like the spider trap link.
Re:American Chemical Society bans university after "spider-t...
by naich on Friday April 04, 2014 @02:25PM
(#7533324)
That's the joke.
Re:American Chemical Society bans university after "spider-t...
by nitrogen on Friday April 04, 2014 @06:24PM
(#7534831)
This sort of Slashdot-esqe misdirection is not exactly appropriate on HN. It starts with black-holing universities with a link mislabeled as a response, but could quickly devolve into misdirections to other black holes of Slashdot that (I assume) we really don't want here.
Re:American Chemical Society bans university after "spider-t...
by user24 on Saturday April 05, 2014 @04:31AM
(#7536395)
Not to mention the fact that if someone at a university does click the link, they could ruin any number of people doing research there. That includes undergrads doing a last-minute reference to their thesis and tenured professors about to cure cancer.
Re:American Chemical Society bans university after "spider-t...
by sebcat on Saturday April 05, 2014 @12:59AM
(#7536019)
As a user of HN, don't tell me or others what's appropriate, thanks.
Re:American Chemical Society bans university after "spider-t...
by dang on Saturday April 05, 2014 @03:44AM
(#7536294)
Nitrogen is right. This sort of Slashdot-esqe misdirection is not exactly appropriate on HN.
Re:American Chemical Society bans university after "spider-t...
by MertsA on Friday April 04, 2014 @06:29PM
(#7534859)
I know it was meant as a joke but some people click first and think later...
Re:American Chemical Society bans university after "spider-t...
by throwaway13qf85 on Friday April 04, 2014 @10:26AM
(#7531571)
Appropriately, "The requested article is not currently available on this site."