You are viewing a single comment's thread from:
RE: [SECURITY BUG] Steemit vulerable to session hijacking
Never trust any URL. For example:
https://steemit.com/market / https://www.google.com
will lead you to google when you click it, even thinking it will lead you to the market.
Basic things, like hovering over the URL before clicking, thus displaying the true website you'll be visiting should prevent misleading evil URL's.