37
submitted 2 months ago* (last edited 2 months ago) by CodenameDarlen@lemmy.world to c/reddit@lemmy.world

This is the main reason I completely ditched Reddit, if you use the new Reddit interface instead of the old one (old.reddit.com), you'll see a constant request being made to "https://www.reddit.com/svc/shreddit/events" (open your DevTools > Network tab, can't see on Firefox idk why).

The problem is, if you add this to your Ublock Origin filters the website won't load properly, that's why uBO team didn't block it already.

You'll notice this request isn't only being made from a interval but also when you do basically any action in the site, like pausing or resuming a video (send timestamps of when did you pause or resumed).

It sends other kind of data like what subjects you're seeing when closed a tab or the related subjects of a post you click, this all can be used to trace a perfect profile of you and things you like.

You can avoid that by using the old.reddit but it still has the same kind of tracker, even tho you can block it here without major issues.

By my analysis, old Reddit interface does the same but to a random URL path that always starts with "reddit.com/api/something". Ex.: reddit.com/api/friends So you can block anything that starts with "www.reddit.com/api" in your custom filters (after all you're using old.reddit.com), then you're mostly free from Reddit trackers (more or less). Side effect is, you won't be able to use the chat in the old interface.

top 22 comments
sorted by: hot top controversial new old
[-] crank0271@lemmy.world 5 points 2 months ago

This is good to know - thanks for sharing. I dread that old.reddit.com's days are numbered...

[-] CodenameDarlen@lemmy.world 5 points 2 months ago

Same, pretty sure they'll completely shut down old reddit soon.

[-] pirat@lemmy.world 4 points 2 months ago

Could the fact that you don't see the requests in Firefox be a sign that uBO actually works better in Firefox and worse in Chrome? Possibly something about manifest V3 being implemented? Or do you think the Firefox DevTools are just less advanced? Or something else?

I'm only speculating, but I believe uBO behaves differently between Chromium-based and Gecko-based browsers because Chrome is restricting the abilities of extensions like uBO to do their thing.

[-] CodenameDarlen@lemmy.world 3 points 2 months ago

My point is, when you open both browsers without any extension you can see the HTTP requests in the Devtools > Network page, so it isn't related to uBO, for some reason I can't see this specific request on Firefox, but I can see in Chromium based.

I know that this request is happening in Firefox because I tested with a MITM Proxy, so I can see all my network traffic, I noticed the request is being made but Firefox DevTools doesn't show it for some reason.

I tested without uBO installed of course, but anyway, requests blocked by uBO are shown in red with "Blocked by uBO" in the "Transferred" column.

[-] aramis87@fedia.io 2 points 2 months ago

I think it would depend on why you were visiting reddit. If you wanted to comment or pm someone you'd need to visit the site. If you're just reading the site, you could use one of the anonymous front ends out there.

[-] FreeBooteR69@lemmy.ca 0 points 2 months ago

It's a guilty little pleasure of mine to read about how shitty it is for those who freely choose to remain there. It's tragic, but I can't help but shake my head in disbelief at such stupidity. Why do people put up with shit like that, totally blows my mind.

[-] nutsack@lemmy.dbzer0.com 0 points 2 months ago

it's got all the content and users

[-] Yaky@slrpnk.net 1 points 2 months ago

IMO it had all the content and users some time ago. I follow mostly specific interest/hobby subreddits, but lately even they have devolved into illiterates asking the same exact questions repeatedly; some strange attention-seeking posts such as pictures captioned "getting started"/“this just arrived" or "what should I do with this thing that I got?"; and really dumb stuff such as "I inhaled solder fumes, will I get lead poisoning?" (These are at least entertaining in a way)

[-] KairuByte@lemmy.dbzer0.com 0 points 2 months ago* (last edited 2 months ago)

This entire post is just a massive misunderstanding of how web software works. This is a normal, every day thing, and every single non static (and even sometimes static) site out there does this, or something parallel to this.

They don’t need to make api calls to track you, you’re logged in or at the very least connecting in a way that lets them follow your session.

They don’t even need api calls to fingerprint your browser, they can just throw that fingerprinting into every post when you go to get more content.

Bottom line: This ain’t it, chief.

[-] CodenameDarlen@lemmy.world 0 points 2 months ago

Inspect this request by yourself and you'll see, they send info about everything, this is not normal. If this is normal all Ublock Origin team work is non-sense, why bother blocking trackers on client-side? If, according to you, they can tracker the same way via server-side.

Blocking this request is a layer of protection, not a silver bullet to not be tracked, other means should be used for that.

[-] KairuByte@lemmy.dbzer0.com 0 points 2 months ago

99% of that is stuff they already know. What api endpoint is this?

[-] CodenameDarlen@lemmy.world 0 points 2 months ago

They can't know at what minute you paused or resumed a video via server side (this is sick to me)... Actually, this doesn't even make sense, if they are able to know all of that via server-side why send redundant data via client-side?

I took a look and besides the amount of info they send, what draw my attention is that they send an accurate flag if you're using an adblocker or not, not sure why tho, but they know who use and who don't, they just chose to do nothing.

There are way more if you inspect it closely.

It's the endpoint of new reddit that I mentioned in the post, if you block it the feed won't load anymore.

[-] KairuByte@lemmy.dbzer0.com 0 points 2 months ago

Their video player streams, not unlike YouTube. Sending the “the user paused” action can easily be explained by them wanting to tell the server to stop sending data when the client isn’t even attempting to view it.

Look, I get that you’re gung go about privacy, but you’re going to see damn near exactly these types of things with any API. Sometimes it’s nefarious, sure. But the vast majority of it is simply how web based software works.

I mean, just look at the majority of that data. What feed you’re in? You pulled the feed data from their server, they don’t need to gather that for tracing purposes. What media is open? Obviously they can track that when you pull the media info down from their servers. How long that media is? The sizing of the media? When that post was posted?

I’m seeing virtually nothing in there they don’t already have. This is just an API being fed information it needs to run. The fact that it’s all information they can already track is kinda proof of that. Why go to all this trouble tracking the information a second time?

[-] JohnnyEnzyme@piefed.social 0 points 2 months ago

Do you know if there's anything that can be blocked from the Javascript side of things? (uMatrix lets me handle that on a case-by-case basis)

[-] CodenameDarlen@lemmy.world 6 points 2 months ago

It seems you can't block this request, I tested using mitm proxy, you can stop requests being made, so when you do it, the Reddit home page stop loading, if I resume but discard the request (same thing as blocking), the page doesn't load anymore.

Back when I noticed this, I asked on uBO origin subreddit, and the uBO Team told me there's nothing they can do, they tried and all attempts broke the site, that's why I said this tracker is unblockable.

I suggested them to intercept the request, change the parameters with fake ones, then proceed, so it's sending a wrong info in the tracker, they said they tried it already but didn't work.

[-] JohnnyEnzyme@piefed.social 1 points 2 months ago

Okay, thanks much for looking in to that!

What I know for sure-- when "old" Reddit is eventually abolished, that'll be my last participation with the site, other than maybe when useful search engine results come up.

[-] thermal_shock@lemmy.world -5 points 2 months ago* (last edited 2 months ago)

If you're blocking 99% of all ads on all other sites, who cares what they're tracking? It's not like it's serving you ads. What are you cautious about?

edit: i love that no one can answer my question but downvote me. you really think all these sites don't already have a profile on everyone? the US government is bought and paid for, you think your info is private? lmao

[-] foggy@lemmy.world 3 points 2 months ago

"Pentagon orders anyone who up voted a post of baby faced picture JD Vance fucking a couch to self deport."

That's what.

[-] CodenameDarlen@lemmy.world 2 points 2 months ago* (last edited 2 months ago)

They can fingerprint you and trace a profile about your personality, this can be used for a lot of things.

Imagine if they know exactly what are your tastes, you don't see ads, ok, you were able to block every unwanted visual interference. But imagine a new platform appears, you access it and by your IP, e-mail, phone number or even nickname they know it's you before you registering there.

Reddit sell all your data for this new platform, the new platform can show you some sweet content that matches exactly you taste, you'll think "this is awesome, everything I like is here", it'll make you access it more often, contribute to it, later they add paywalls, mandatory ads, then you know... You've being manipulated already. You can't live without it and will be force to accept their terms.

[-] thermal_shock@lemmy.world 1 points 2 months ago

Do you think they don't already have this information? I'm genuinely asking what you're trying to block from reddit that isn't already out there.

[-] whosepoopisonmybuttocks@sh.itjust.works 2 points 2 months ago* (last edited 2 months ago)

if a creepy stranger walks in on you while you're changing, this doesn't mean that you should simply let them watch you change from now on. If anything, you should get a lock on your door to prevent it from happening again.

this post was submitted on 15 Oct 2025
37 points (97.4% liked)

Reddit

21860 readers
3 users here now

News and Discussions about Reddit

Welcome to !reddit. This is a community for all news and discussions about Reddit.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


Rule 1- No brigading.

**You may not encourage brigading any communities or subreddits in any way. **

YSKs are about self-improvement on how to do things.



Rule 2- No illegal or NSFW or gore content.

**No illegal or NSFW or gore content. **



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding META posts.

Provided it is about the community itself, you may post non-Reddit posts using the [META] tag on your post title.



Rule 7- You can't harass or disturb other members.

If you vocally harass or discriminate against any individual member, you will be removed.

Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.



Rule 8- All comments should try to stay relevant to their parent content.



Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- Majority of bots aren't allowed to participate here. This includes using AI responses and summaries.


founded 2 years ago
MODERATORS