Collected research

Hyperlink Spoofing and the Modern Web

Hyperlink Spoofing and the Modern Web - random dross - Site Home

David Ross · blogs.msdn.com

Ross surveys how social platforms display hyperlink destinations and finds the indicators are inconsistent and spoofable. Twitter's server-side short-link resolution created a TOCTOU window: change the redirector after the tweet is posted and the displayed target no longer matches where the click goes. He tests five anonymised platforms plus McAf.ee and proposes pinning resolved destinations.

Record

Document

Hyperlink Spoofing and the Modern Web - random dross - Site Home

Researcher

David Ross

Published by

blogs.msdn.com

Topic

Other

In the archive

• Collected in the 2012 research round

Related sources

• Hyperlink Spoofing and the Modern Web Whitepaper

Tags

• open-redirect
• url-parsing
• toctou
• measurement-study
• http
• mitigation
• info-leak
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of David Ross, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 7 August 2026.