this post was submitted on 08 Oct 2023
697 points (96.8% liked)

Privacy

32130 readers
910 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I see a lot of people, including friends and family, sharing URLs rife with tracking parameters.

I feel alone in making sure that I'm sharing the cleanest possible URLs to others. For example, checking if the URLs are shortened to hide plenty of tracking params.

Just need to vent, thanks for reading.

Edit: adding some context for future references.

By using url tracking params, tech companies can track who shares the content and who clicks on that specific shared urls. A simple but effective tracking method.

Try sharing Instagram post or YouTube video from the apps.

Instagram adds 'igshid=' . YouTube adds 'si='.

If you share the same IG or YouTube content from different accounts. The 'igshid', 'si' value will be different.

This can be used to tag who shares it, and who clicks on that specific url param value.

TikTok hides a ton of such params behind shortened url. Try expanding tiktok shared urls.

If you use android, use this app to expand, analyze and clean up urls https://github.com/TrianguloY/UrlChecker

If you use Firefox (you should), install ublock origin and add this url tracking filter maintained by adguard: https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_17_TrackParam/filter.txt

you are viewing a single comment's thread
view the rest of the comments
[–] Kushan@lemmy.world 12 points 1 year ago (1 children)

I do this because I hate super long URL's, but is this actually a problem for privacy? Does it not actually fuck with the tracking because now two separate people have got the same tracking Params? (Genuine question).

[–] DrM@feddit.de 27 points 1 year ago (1 children)

Nope. It's a nightmare. The ad company now knows that you are friends or family

[–] Kushan@lemmy.world 4 points 1 year ago* (last edited 1 year ago) (2 children)

But what If you send it via social media like Lemmy or Reddit?

[–] narwhal@lemmy.ml 9 points 1 year ago (1 children)

Then they know who's the poster (you), they can know your username if they want to. A lot of people use the same username in many places, so unless you use different usernames in different social media, it's still valuable data.

If not that, seeing how the content spreads through social media and analyzing the reach is interesting data by itself.

[–] SnowdenHeroOfOurTime@unilem.org 2 points 1 year ago (1 children)

Most tracking parameters actually just specify the source the link came from. Like Twitter or an email. I don't see a lot of tracking parameters that literally are tried to an individual account. But here you seem to be saying that's the most common type of tracking param

[–] narwhal@lemmy.ml 4 points 1 year ago

Try sharing Instagram post or YouTube video from the apps.

Instagram adds 'igshid=' . YouTube adds 'si='.

Try sharing the same IG or YouTube content from different accounts. The 'igshid', 'si' param value will be different

It can be used to tag who shares it, and who clicks on that specific url param.

TikTok hides a ton of such params behind shortened url. Try expanding tiktok shared urls.

[–] CileTheSane@lemmy.ca 3 points 1 year ago (1 children)

Then they know that person follows you

[–] Kushan@lemmy.world 1 points 1 year ago (1 children)

I click links on Lemmy all over the place, I don't follow anyone in particular?

[–] QuazarOmega@lemy.lol 3 points 1 year ago* (last edited 1 year ago)

I wouldn't go as far as to say that once two people have clicked on the same tracking link the company behind it can tell what your relation is directly. What they will know is that the two or more people are connected in some way, to then infer in what way, they need other circumstantial data, maybe they have an account on that website and they share the surname or, even easier, without account they can tell that the requests came from IPs that come from a circumscribed area, and on and on, the more data points you add the better predictions the company can make.
If several IPs from disparate places in the world use the same link they can probably tell that the link was shared on social media, not knowing which one, but it was sent in a public internet space at least