It seems that 2009 is starting off with a Twitter phishing problem. Users are being "tricked" into clicking on links that then do all sorts of bad things.

While these attacks can come via "regular" URLs, we will eventually see phishers use sites like TinyURL to mask their destination, making it that much harder on desktop and in-stream protection mechanisms.

If you run OS X 10.5 (Leopard), I offer you Throw Them Back (592K compressed archive) as a way to stay a step ahead of the bad guys. This version (0.9) has two modes. The most useful one is where you start the app up, then copy a URL to the clipboard and invoke the global shortcut key (Command-Control-J :: this will be a configurable option in the next release) which will take the URL, expand it (if necessary) and run it through the PhishTank screening service to see if it is a "bad" site. PhishTank is run by OpenDNS and is a great service, but it is not comprehensive (no service would be). While you can pretty much trust the items tagged as phishing (indicated by a fish icon that will pop up in the window), you should not assume that a lack of notification equals an OK site.

If you are determined to press on even if you do not recognize an expanded URL (or are unsure about a standard URL), use the arrows next to the URL fields to bring up a drawer that will render the site filtered through Google Mobile. That should take care of any malicious code and let you see if this is a site you really want to visit.

The URL you pasted is put back on the clipboard, so you can use it anywhere you like and you can copy the short or expanded URL from the displayed fields.

The second mode is where you just enter or paste a URL right into the field in the window. While that is useful, it is not nearly as speedy.

I have a bunch of items on the TO DO list, including:

• Making it run dockless (as an option)
• Letting you reconfigure the global hotkey (priority item)
• Auto-pasting a URL from clipboard when you switch (e.g. Alt-Tab) to the application
• Having the app auto-hide when not called up by the hot key or deliberate foreground switch
• Context menu item (with optional immediate results in-menu)
• Integration with Google's Safe Search API

I welcome feedback and suggestions in the comments or on Twitter (@hrbrmstr).

If you do like the software, please consider clicking the button on the right. I'm seriously contemplating making version 1.0 (this is version 0.9) something you have to pay for to get all the additional features. If you act now, you will receive free upgrades forever for just $3.99USD. Version 1.0 pricing will be $4.99USD.