Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Option to not open links contained inside SMS to avoid phishing #1945

Open
e075e opened this issue Apr 13, 2023 · 5 comments
Open

Option to not open links contained inside SMS to avoid phishing #1945

e075e opened this issue Apr 13, 2023 · 5 comments

Comments

@e075e
Copy link

e075e commented Apr 13, 2023

description

It would be useful to have an option that do not allow the user to open a link contained in the text of an SMS.
Nowadays, most of them are phishing that try to steal the user's data, like bank accounts.

Honestly, I would also make it default to be on the safe side.

The only downside I am aware is that SMS link sent by search and rescue team to enable location finding will not immediately work, since you will have to copy and paste it.

alternative

If disabling it is not an option, please consider to have a clear warning when opening a link

example of phishing received by SMS

the url has already been reported and blocked

phishing

@87113
Copy link

87113 commented Apr 13, 2023

Hi, I agry with this idea.
Maybe let the link from a known number be clickable.

If the number is already in the contact list or if I already send a message to this number for example.

@e-t-l
Copy link

e-t-l commented Apr 24, 2023

How about you don't open unsafe links from unknown phone numbers?

Lots of apps contain links. It's the user's responsibility to decide what to open. It's unreasonable to expect every app to disable an extremely basic, common, useful function like hyperlinks (let alone to disable it by default) just so careless users don't open them unthinkingly.

@tcecyk
Copy link

tcecyk commented Jul 7, 2023

in 2016 the same feature request was turned down - #522 (comment)

it's a good idea still, but you never know the demand - the url opening could be handled by a helper app - https://f-droid.org/packages/com.trianguloy.urlchecker/

@e075e
Copy link
Author

e075e commented Feb 12, 2024

Today news

https://www.ilfattoquotidiano.it/2024/02/10/risponde-a-falso-sms-della-banca-e-perde-240mila-euro-18-indagati-per-truffa-aggravata/7441819

So,

  1. allowing only contacts is not an option for everyone, due to spoofing
  2. Not every user is so wise to not open links they do not known, regardless of their age. Especially if the link is close to its original.
  3. Maybe few people care for this feature, but risk exists and can be devastating

A clear warning does not harm anyone, and also having this as an option

@e-t-l
Copy link

e-t-l commented Feb 12, 2024

Ok. But this project is abandoned. No one is updating the code anymore, haven't you noticed? So unless you want to fork the repo and code it yourself, it's not going to happen.

A quick Google search turned up UntrackMe (https://f-droid.org/repo/app.fedilab.nitterizeme_33.apk) as an app that should accomplish exactly what you want.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants