PSA: You might be unknowingly doxxing yourself by sharing links containing trackers
from shadysus@lemmy.ca to privacy@lemmy.ca on 18 Oct 2024 08:41
https://lemmy.ca/post/31187638

Earlier today I came across a Reddit comment with a link to an Instagram post. The link had ?igsh= at the end.

When I clicked on the link, I got this popup. It had a name and profile photo that was different from that of the post being shared.

Join Firstname Lastname on Instagram

See photos, videos, and more from Firstname Lastname.

[ Open Instagram ]

not now

I avoid link trackers. However, I did not realize it was this bad.

To my knowledge, TikTok does the same thing and lists the name of the person that shared the link. Assuming this increases engagement, any website could enable such a feature, even on old links that you shared in the past.

You should manually remove any trackers before sharing, or use an app for it.

#privacy

threaded - newest

slazer2au@lemmy.world on 18 Oct 2024 08:56 next collapse

Firefox has an option called copy link without trackers on their desktop version which covers a lot of this.

kionite231@lemmy.ca on 18 Oct 2024 09:18 next collapse

It doesn’t cover YouTube link trackers :/

takeda@lemmy.world on 18 Oct 2024 10:03 next collapse

Yeah I was surprised about it. That tracking parameter is one that I notice the most and almost everyone includes it. It made me think that feature is either broken, or in misunderstanding what it supposed to do.

jherazob@fedia.io on 18 Oct 2024 10:58 next collapse

I use an extension that handles A LOT of these unneeded parameters for me on desktop FF, and on Android i use an app that does some processing on URLs, among it cleaning URLs, as my default browser so it gets to URLs before i open any. This saves me some manual handling.

Showroom7561@lemmy.ca on 18 Oct 2024 14:01 next collapse

ClearURLs is the only thing that works for me. Adguard and Firefox have tracking removal features, but they don’t seem to work most of the time.

i_am_not_a_robot@discuss.tchncs.de on 18 Oct 2024 14:33 collapse

Untracker lets you copy links on Android without tracking parameters, but it’s so annoying in YouTube. I have to click the share button to get the fake YouTube share menu and then swipe past preferred options that I never use to reach the “more” option that reveals the real share menu and then select Untracker to see the link and then it gives me the option to copy (for sharing) or share (which also gives the option to copy). Often going through this process causes YouTube to stop playing.

Tyoda@lemm.ee on 18 Oct 2024 11:19 collapse

It does remove ?feature=shared and ?si=… from youtu.be links. Maybe not from youtube.com links, though I’m not sure how people get those in the first place.

Longmactoppedup@aussie.zone on 18 Oct 2024 16:32 collapse

Pipepipe share just gives YouTube.com links. Like this:

www.youtube.com/watch?v=HUUy3mnAhCE

Is there tracking in that URL?

Tyoda@lemm.ee on 18 Oct 2024 16:39 collapse

Nope, that’s clean. HUUy3mnAhCE is just the ID of the video itself, not a unique identifier for your sharing of this video.

Septimaeus@infosec.pub on 18 Oct 2024 09:52 next collapse

Safari too, part of default tracking prevention, though both browsers miss a lot of tracker types, so extensions are still needed to handle the rest.

helenslunch@feddit.nl on 18 Oct 2024 18:24 next collapse

Most browsers do but it’s literally never worked for me. There is a very popular browser extension that will strip them though.

kent_eh@lemmy.ca on 18 Oct 2024 22:17 collapse

Firefox has an option called copy link without trackers

Thunderbird also does that . (Not surprising since it’s also a Mozilla project)

[deleted] on 18 Oct 2024 09:29 next collapse

.

helenslunch@feddit.nl on 18 Oct 2024 18:28 next collapse

Pretty much every site on the internet is using tracker links at this point. And many times they won’t even be visible if you click or hover on them.

For instance, on Facebook literally any link you click will look like a normal link but when you click on it, it sends you to a tracking domain at l.facebook.com. I just blocked the entire domain. If there’s an Instagram or YouTube video posted it’ll actually hide the link altogether, and even the title, so there’s literally no way you can reach that content without going through their tracking service.

RandomVideos@programming.dev on 18 Oct 2024 20:16 collapse

I cant believe lemmy is using tracker links

The internet is much bigger than the few websites that track links

helenslunch@feddit.nl on 18 Oct 2024 21:33 collapse

Is it?

nik282000@lemmy.ca on 20 Oct 2024 20:07 collapse

It’s not.

yrmp@lemmy.world on 20 Oct 2024 06:30 collapse

I get around this by not using dogshit platforms.