445

cross-posted from: https://lemmy.ca/post/31187638

Earlier today I came across a Reddit comment with a link to an Instagram post. The link had ?igsh= at the end.

When I clicked on the link, I got this popup. It had a name and profile photo that was different from that of the post being shared.

Join Firstname Lastname on Instagram

See photos, videos, and more from Firstname Lastname.

[ Open Instagram ]

not now

I avoid link trackers. However, I did not realize it was this bad.

To my knowledge, TikTok does the same thing and lists the name of the person that shared the link. Assuming this increases engagement, any website could enable such a feature, even on old links that you shared in the past.

You should manually remove any trackers before sharing, or use an app for it.

you are viewing a single comment's thread
view the rest of the comments
[-] tal@lemmy.today 106 points 1 month ago* (last edited 1 month ago)

I tend to manually strip out anything random hash-looking from URLs. Not so much because I'm worried about identity being exposed, but because it just encourages data-mining and figuring out what causes people to post links places.

There's some open-source app I recall on Android in F-Droid that will do this for a set of known sites, "Link Cleaner" or something.

kagis

"Leon -- URL Cleaner". I assume that this is an allusion to the movie.

https://github.com/svenjacobs/leon

I also strip off the extension that the Wikipedia app adds to indicate that Wikipedia links are from the app.

I also strip off "m." leading URLs, like "m.wikipedia.org", since that, by convention, forces desktop users to see a mobile version of a site, which is not normally what they want, whereas a non-.m link will still show the mobile site to mobile users.

[-] oce@jlai.lu 48 points 1 month ago

Latest versions of Firefox offer to copy and paste URL without trackers. I am not sure how it compares to specialized tools.

[-] aleq@lemmy.world 12 points 1 month ago

How do I use this feature? I'm a Firefox user since quantum and had no idea this was a thing.

[-] my_hat_stinks@programming.dev 36 points 1 month ago

Just right click a link, it's the option directly under copy link.

[-] aleq@lemmy.world 13 points 1 month ago

Never knew it, very neat!

[-] acockworkorange@mander.xyz 2 points 1 month ago

Apparently it doesn’t work with YouTube. That’s an elephant sized hole.

[-] CrayonRosary@lemmy.world 1 points 1 month ago

Google pays them a lot of money. Are you surprised?

[-] acockworkorange@mander.xyz 1 points 1 month ago

SHOCKED! ~/s~

I’d rather not attribute to malice what is more easily explained by incompetence.

[-] cmnybo@discuss.tchncs.de 23 points 1 month ago

There is a Firefox addon called ClearURLs that automatically removes all of the tracking crap. It works on PC and Android.

[-] tb_@lemmy.world 15 points 1 month ago

uBlock Origin also has a filter built-in, though you have to enable it. It's under Filter Lists > Privacy > AdGuard URL Tracking Protection

[-] JadenSmith@sh.itjust.works 4 points 1 month ago

Thank you, I had no idea. Already had uBlock Origin on my phone (FF), so that's one less extension needed. Works perfectly!

[-] ouch@lemmy.world 1 points 2 weeks ago
[-] tb_@lemmy.world 1 points 2 weeks ago

I assume it blocks something from loading, but I wouldn't exactly know. I haven't looked into it.

[-] TunaLobster@lemmy.world 2 points 1 month ago

I used that so much when I was creating purchase orders. Nobody needs to know how I got to that page.

[-] tb_@lemmy.world 18 points 1 month ago

Generally anything that comes after a questionmark in a URL can be safely stripped out, though not always. The random string of characters you get after a youtu.be link is tracking, the ?t=123 is a timestamp.

[-] Ephera@lemmy.ml 8 points 1 month ago

YouTube has an even better example of it being problematic to strip the parameters. The original video links look like this:

https://www.youtube.com/watch?v=dQw4w9WgXcQ

The thing is, the stuff after the question mark isn't inherently bad, we just have the convention that the path (/watch) should identify a static resource on the server, whereas the stuff after the question mark is more variable or user-specific.

But YouTube is older than that convention. If YouTube got built today, that URL would look more like this:

https://www.youtube.com/watch/dQw4w9WgXcQ

On the other hand, the URL of a specific search result page would still look the same, even with today's conventions, because it doesn't identify a static resource:

https://www.youtube.com/results?search_query=never+gonna+give+you+up
[-] tb_@lemmy.world 5 points 1 month ago

Nice example link you used there

[-] Ephera@lemmy.ml 3 points 1 month ago

Thanks, although I don't believe there's any other link I could've used. 🙃

[-] edgemaster72@lemmy.world 15 points 1 month ago

I also strip off “m.” leading URLs...

Bless you kind netizen

[-] kambusha@sh.itjust.works 10 points 1 month ago* (last edited 1 month ago)

URLCheck may be the app you're thinking of.

Edit: the way it works, is that you set it up as your default browser. Then, whenever you hit a link, it will open up URLCheck first, and you'll get to decide what to do with the link, strip away query parameters, and which app to open the link with.

[-] Deconceptualist@lemm.ee 2 points 1 month ago

Omg I've wanted something like this for a long time. Thanks!

[-] CrayonRosary@lemmy.world 2 points 1 month ago

you set it up as your default browser

You don't have to. You can just copy any URL and share it to the app. Then copy it from the app.

[-] otter@lemmy.dbzer0.com -1 points 1 month ago
  1. Setting anything as your default "browser" when it's not a browser is only a little sus — "open" source, or no.

  2. Don't share a link if you can't find its complete "verbose" version.

  3. ...

  4. 🤷🏽‍♂️🤞🏽

[-] conciselyverbose@sh.itjust.works 5 points 1 month ago

The reasoning is super transparent. It's the only way it could do what it's doing. 🤷🏼‍♀️

[-] MicrowavedTea@infosec.pub 3 points 1 month ago

How is it more "sus" than setting any other application as default browser? It needs to be default because that's how Android works.

[-] Cheradenine@sh.itjust.works 1 points 1 month ago

You can also set default browser to 'none' then anytime you tap a link a list of browsers and things like Leon, URL check etc. will pop up. In any case they don't require internet access to work.

[-] Asifall@lemmy.world 7 points 1 month ago

Yeah I have a habit of doing this and then testing the link to find the smallest possible version. Mostly because I find it annoying when I want to text a link to someone and it takes up an entire page of the chat.

[-] wrekone@lemmyf.uk 3 points 1 month ago

Leon is great. I try to remember to use it anytime I share a link. As a result, I have found that that some links are just the base url plus a UUID (e.g. mycoolshoppingsite.com/GAJEBKT), so you can't strip out the tracking without breaking the link entirely.

[-] CrayonRosary@lemmy.world 1 points 1 month ago

You're the best!

I just installed it. Look at this perfectly anonymous link:

https://www.youtube.com/watch?v=p44G0U4sLCE

this post was submitted on 18 Oct 2024
445 points (98.9% liked)

You Should Know

33224 readers
4 users here now

YSK - for all the things that can make your life easier!

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must begin with YSK.

All posts must begin with YSK. If you're a Mastodon user, then include YSK after @youshouldknow. This is a community to share tips and tricks that will help you improve your life.



Rule 2- Your post body text must include the reason "Why" YSK:

**In your post's text body, you must include the reason "Why" YSK: It’s helpful for readability, and informs readers about the importance of the content. **



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding non-YSK posts.

Provided it is about the community itself, you may post non-YSK posts using the [META] tag on your post title.



Rule 7- You can't harass or disturb other members.

If you harass or discriminate against any individual member, you will be removed.

If you are a member, sympathizer or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people and you were provably vocal about your hate, then you will be banned on sight.

For further explanation, clarification and feedback about this rule, you may follow this link.



Rule 8- All comments should try to stay relevant to their parent content.



Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- The majority of bots aren't allowed to participate here.

Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.



Partnered Communities:

You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.

Community Moderation

For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.

Credits

Our icon(masterpiece) was made by @clen15!

founded 1 year ago
MODERATORS