428

cross-posted from: https://lemmy.ca/post/31187638

Earlier today I came across a Reddit comment with a link to an Instagram post. The link had ?igsh= at the end.

When I clicked on the link, I got this popup. It had a name and profile photo that was different from that of the post being shared.

Join Firstname Lastname on Instagram

See photos, videos, and more from Firstname Lastname.

[ Open Instagram ]

not now

I avoid link trackers. However, I did not realize it was this bad.

To my knowledge, TikTok does the same thing and lists the name of the person that shared the link. Assuming this increases engagement, any website could enable such a feature, even on old links that you shared in the past.

You should manually remove any trackers before sharing, or use an app for it.

top 34 comments
sorted by: hot top controversial new old
[-] huginn@feddit.it 48 points 8 months ago

Note that a TikTok link is un-cleanable. It will always trace back to you. Do not ever share TikTok links unless you're willing to expose your identity to the person you're sharing with.

[-] danda@lemmy.zip 12 points 8 months ago

I think you can go find the video in an incognito tab, then grab the link from there

[-] subtext@lemmy.world 23 points 8 months ago

Specifically, you can “share” it to yourself, open that link in an incognito tab, then strip out everything but the user and video id

https://www.tiktok.com/@USERNAME/video/LONGSTRINGOFDIGITS

You have to do the same thing with Amazon a.co links I think

[-] LaSirena@lemmy.world 3 points 8 months ago* (last edited 8 months ago)

This. Alternatively, share the link to URL Cleaner, unshorten it, and remove the extra junk. It's an extra few steps, but worth it.

[-] kofe@lemmy.world 1 points 8 months ago

It would only show the info relating to the account though, right? I don't share my Instagram because I can't figure out how to disconnect it from my Facebook (plus it doesn't embed on discord - very rude), but I don't use my real info for any of my other accounts.

[-] DillyDaily@lemmy.world 40 points 8 months ago

Yuuuup, found out the hard way that tiktok shows you when someone watches a link you sent them.

My dad loves sending me cat videos on the tiktok, he sends me the links on Facebook.

I have two tiktok accounts because I knew there was a risk that my dad would be able to find me on tiktok through contacts. My dad is a transphobe, so in order to not poke the bear I maintain a cis persona when dealing with him.

But it took him 0.3 seconds to realise that he sent his daughter a link, and then an openly transmasc account user with a similar name opened that link, and then his daughter replied to his message reacting to the link...my ears are still bringing from the phone call he made to me.

So thats how my misunderstanding of tiktok trackers outted me to my transphobic father.

(fortunately I'm a fully grown adult and can cut him out of my life if he doesn't calm down)

[-] mouserat@discuss.tchncs.de 11 points 8 months ago

I'm so sorry you have to deal with this. And so terrified that anonymity is wiped out that easily

[-] chiliedogg@lemmy.world 5 points 8 months ago

I don't remember which site this was, but I remember it being a pretty big one...

Anyway - I shared a link on reddit about 10 years ago, and I got a PM from a user addressing me by my first name telling me to delete the link.

Not only did it say who I was - the link logged people into my account.

[-] DillyDaily@lemmy.world 6 points 8 months ago

Jesus, now that its terrifying!

What would even be the point of a link that allows you that? Like, why was it designed to do that!?

Props to that person who PM'd you the warning.

[-] chiliedogg@lemmy.world 3 points 8 months ago

They were probably just lazy in their site design and the link itself contained the token for the login or whatever.

[-] And009@reddthat.com 2 points 8 months ago

He'll come around, some people just take longer

[-] DillyDaily@lemmy.world 5 points 8 months ago

I've been out as queer since I was 14. I'm in my 30, he still hasn't come around.

Given his age and health, if he's planning too come around he'd better get on it quick, at this rate he's dying a bigot.

I'm not waiting any more, I put my whole life on hold waiting for him to come around so I could live my life safely. If I need to cut him out of my life I will.

I appreciate they kind words, but please keep in mind mind that it's not always smart or safe to tell a trans person to be patient. The individual will know their level of safety, and advice to be patient and understanding can in some cases case be very, very harmful.

[-] And009@reddthat.com 1 points 8 months ago

Is it just him?

Or are there more around him mirroring this hate?

[-] DillyDaily@lemmy.world 1 points 8 months ago

No idea, he lives on the other side of the state and I only see him 3 times a year for his birthday, father's day and Christmas. My brother used to live with him but he spends most of his time with mum now.

I'm certain my dad is getting this rhetoric from social media because he's a lonely and isolated man in his late 60s with no friends outside of his male dominated blue collar job.

But it's not my job to reform him, I don't have the skill set or energy.

[-] jherazob@fedia.io 39 points 8 months ago

MANY apps currently have these unneeded tracker parameters, here's Youtube

[-] GeneralInterest@lemmy.world 18 points 8 months ago

Good PSA. Personally I'm not that worried because

  1. I don't use Instagram
  2. Firefox has an option to copy links without site tracking, which hopefully would work on Instagram links
  3. I try to only write stuff online that wouldn't be massively embarrassing if anyone does happen to figure out who I am
[-] XeroxCool@lemmy.world 2 points 8 months ago

The fingerprinting goes waaaaay beyond Instagram. Maybe not frequently username specific, but it's still kinda weird to always be throwing out your device type, browser, and prior we page among other things

[-] _____@lemm.ee 17 points 8 months ago

another PSA if you have an Xbox account (even for PC) and have added anyone to friends they get to see your full name, state city. It is very cool to play games while also doxing yourself. thanks Microsoft

[-] QuadratureSurfer@lemmy.world 9 points 8 months ago

You can go into settings and change it so that it doesn't show to anyone. But at some point they made an update and it reset those options to the default setting even if you had previously set it to hidden.

At that point I just went in and changed my name on my account settings.

[-] subtext@lemmy.world 7 points 8 months ago

Hi yes, my name is Tim Microsoft, I live at 123 Microsoft St, Microsoft, CA 12345-6789

[-] sigmaklimgrindset@sopuli.xyz 6 points 8 months ago

I actually have MS Seattle HQ address as my Xbox address lol

[-] A_Random_Idiot@lemmy.world 2 points 8 months ago* (last edited 8 months ago)

if I ever start a multibillion dollar company, I am totally going to name the road [Company] St, with the address being 123.

Just so everyone thinks the HQ address is fake.

[-] _____@lemm.ee 4 points 8 months ago* (last edited 8 months ago)

it was on me to use my real name. at the same time for any online purchase I use my real name so I didn't give it second thought.

I just thought it was very wrong of them to expose that to friends list. I pick a nickname for a reason, so people see my nickname.

[-] femtech@midwest.social 2 points 8 months ago

I thought the default was only favorite friends could see that.

[-] balder1991@lemmy.world 12 points 8 months ago

Ever since I realized TikTok creates a unique share URL that tells the person you’re the one sharing it, I became paranoid with any social media share links that are created dynamically. I won’t share them unless I try them out first.

[-] Shameless@lemmy.world 4 points 8 months ago

Its more effort but I do this if I think its worth sharing a link, test the link in a private browser first. I just also don't want to be doxxing friends and family to the platform in question either.

Let's just share content and not track people and accounts

[-] Andromxda@lemmy.dbzer0.com 8 points 8 months ago
[-] Randelung@lemmy.world 2 points 8 months ago

It's the reason I don't use share buttons. The YouTube link is clean (afaik, idk if they encode data into the ID) when copying the URL. Same with other services.

[-] werefreeatlast@lemmy.world 1 points 8 months ago

My 78 year old aunt from Mexico did it and I don't give a fact! Lol

[-] unemployedclaquer@sopuli.xyz 1 points 8 months ago

Here I am, mister froggy, and my hat is slay, and I bought a subscription to a VPN controlled by an Israeli company

[-] MachineFab812@discuss.tchncs.de 1 points 8 months ago* (last edited 8 months ago)

Joke's on you; Almost all of the personalized links whatever app/sites generate for me to share are invalid until I delete massive chunks of them!

As a result, I anonymize all of them just so I can share stories about random bullshit.

[-] tal@lemmy.today 0 points 8 months ago* (last edited 8 months ago)

I tend to manually strip out anything random hash-looking from URLs. Not so much because I'm worried about identity being exposed, but because it just encourages data-mining and figuring out what causes people to post links places.

There's some open-source app I recall on Android in F-Droid that will do this for a set of known sites, "Link Cleaner" or something.

kagis

"Leon -- URL Cleaner". I assume that this is an allusion to the movie.

https://github.com/svenjacobs/leon

I also strip off the extension that the Wikipedia app adds to indicate that Wikipedia links are from the app.

I also strip off "m." leading URLs, like "m.wikipedia.org", since that, by convention, forces desktop users to see a mobile version of a site, which is not normally what they want, whereas a non-.m link will still show the mobile site to mobile users.

[-] cmnybo@discuss.tchncs.de 0 points 8 months ago

There is a Firefox addon called ClearURLs that automatically removes all of the tracking crap. It works on PC and Android.

[-] tb_@lemmy.world 1 points 8 months ago

uBlock Origin also has a filter built-in, though you have to enable it. It's under Filter Lists > Privacy > AdGuard URL Tracking Protection

this post was submitted on 18 Oct 2024
428 points (100.0% liked)

You Should Know

39738 readers
74 users here now

YSK - for all the things that can make your life easier!

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must begin with YSK.

All posts must begin with YSK. If you're a Mastodon user, then include YSK after @youshouldknow. This is a community to share tips and tricks that will help you improve your life.



Rule 2- Your post body text must include the reason "Why" YSK:

**In your post's text body, you must include the reason "Why" YSK: It’s helpful for readability, and informs readers about the importance of the content. **



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That's it.



Rule 5- No baiting or sealioning or promoting an agenda.

Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding non-YSK posts.

Provided it is about the community itself, you may post non-YSK posts using the [META] tag on your post title.



Rule 7- You can't harass or disturb other members.

If you harass or discriminate against any individual member, you will be removed.

If you are a member, sympathizer or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people and you were provably vocal about your hate, then you will be banned on sight.

For further explanation, clarification and feedback about this rule, you may follow this link.



Rule 8- All comments should try to stay relevant to their parent content.



Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- The majority of bots aren't allowed to participate here.

Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.



Rule 11- Posts must actually be true: Disiniformation, trolling, and being misleading will not be tolerated. Repeated or egregious attempts will earn you a ban. This also applies to filing reports: If you continually file false reports YOU WILL BE BANNED! We can see who reports what, and shenanigans will not be tolerated.

If you file a report, include what specific rule is being violated and how.



Partnered Communities:

You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.

Community Moderation

For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.

Credits

Our icon(masterpiece) was made by @clen15!

founded 2 years ago
MODERATORS