Down for Update 8pm CDT, March 18, 2009
I’ll be taking Cullect down for approximately 1 hour tonight while I push an update.
Shortened URL services – minnpo.st, grv.me, etc – will be impacted by this outage (more on this later).
The Insecurity of Short URLs
I just got an email from the awesome folks at Joyent alerting me that someone was using Culld.us to redirect to their phishing scam site.
I promptly blocked their IP, wiped the offending URLs from the system and reset the cache.
This experience brings to mind an after hours conversation I had with a couple U of MN network security guys about inherent security risks of short URL services.
Cullect currently recognizes 83 URL shortening services.
EIGHTY-THREE
I’m hard pressed to think of 83 providers of anything (outside of entertainment services). That’s a measure of demand if anything. Even more reason publishers should – as Dave Winer recommends – pull this capability under their own umbrella.