-
I create a well crafted post to a normal site that gets 10.000 upvotes.
-
I change the URL to a malicious site.
-
???
-
Profit
There’s also
-
I create a well crafted post woth a url to a normal site in the body of my post that gets 10.000 upvotes.
-
I change the URL to a malicious site.
-
???
-
Profit
This pretty much - any user can do the same to a link in the body of a post
-
It makes it a little bit easier to do, but it is not difficult to replicate this effect without changing the URL in the title - using a redirected URL and changing the redirect address, for example.
I think that this small increase in the way this kind of attack can be delivered is more than counter-balanced by the convenience of having editable titles.
Most subreddits also blocked redirect links for (partially) reason.