#25926 closed defect (fixed)

"The anonymous Internet" page on metrics has malicious looking links

Reported by: pastly Owned by: metrics-team
Priority: High Milestone:
Component: Metrics/Website Version:
Severity: Major Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

As abrasively reported on Reddit ...

It appears geography.oii.ox.ac.uk no longer is a link worth clicking on. In fact, it might be actively malicious now.

Child Tickets

Change History (9)

comment:1 Changed 18 months ago by pastly

Here is what the link used to lead to. https://archive.fo/TSnfx

You can also find it in the wayback machine. https://web.archive.org/web/*/http://geography.oii.ox.ac.uk/?page=tor

comment:2 Changed 18 months ago by karsten

Status: newneeds_information

Huh, unexpected. Well, I took out the link until OII have resolved this issue. I'd like to put it back afterwards, though. We'll see. Leaving this ticket open for now. Thanks for the report!

(Sounds like it's time to think about adding an "External Link" page with a big warning...)

comment:3 Changed 17 months ago by karsten

It seems like the OII site is not hacked anymore. Should we put the link back? After all, the link is what this page is for, not the low-resolution preview image.

pastly, what's your intuition here?

comment:4 Changed 17 months ago by pastly

I think it would be fine to add the link back to the metrics page.

It seems they have changed the URL for "The Anonymous Internet" to http://geography.oii.ox.ac.uk/the-anonymous-internet/, so I'd probably link to that instead.

I think just linking to the OII page again is reasonable. Providing an archived link right next to it would be a nice and easy plus.

comment:5 in reply to:  4 ; Changed 17 months ago by cypherpunks

Replying to pastly:

Providing an archived link right next to it would be a nice and easy plus.

Why not to provide only an archived link with a specific date in which the URL is known to not be malicious https://web.archive.org/web/2018..../...?

comment:6 in reply to:  5 Changed 17 months ago by pastly

Replying to cypherpunks:

Replying to pastly:

Providing an archived link right next to it would be a nice and easy plus.

Why not to provide only an archived link with a specific date in which the URL is known to not be malicious https://web.archive.org/web/2018..../...?

I think places generally deserve to receive traffic directly so that visitors can continue on exploring their website if desired. Linking to them only via an archived link raises the bar too much IMHO.


karsten, it helps, I archived the page today. https://archive.fo/LfJ7D

comment:7 Changed 17 months ago by irl

When I was looking at this for #24422, I was considering moving this to another area of the website to make it clear that this is external and not part of Tor Metrics. We can add a disclaimer there that we are not responsible for the content of external websites. As the website was restored, it is clearly something that is "maintained" and so there is no need here to link to an archived version in my opinion.

comment:8 Changed 17 months ago by karsten

I'm open to the idea of moving this page to another area of the website. When we added the page, those other areas of the website did not exist, and it made some sense to create link pages just as we had graph pages or table pages. But we should reconsider this, now that the website has evolved quite a bit. Do you mind doing that as part of #24422?

I'm now going to put the link back, but without the archived version.

comment:9 Changed 17 months ago by karsten

Resolution: fixed
Status: needs_informationclosed

There, put the updated link back to the page. Let's discuss moving the link elsewhere on #24422. Closing. Thanks for all the input!

Note: See TracTickets for help on using tickets.