this post was submitted on 28 Dec 2023
102 points (91.8% liked)

Privacy

30829 readers
1613 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
 

Lately I've noticed some mainstream sites injection tracking links into literally every link on their site.

When I hover over it, it shows the correct link at the bottom of my browser, but if I click it or copy it, it takes me to a hijacked tracker link.

Then I can't even get the original link without having my activity tracked.

How do I get the original link that appears at the bottom of my browser?

top 38 comments
sorted by: hot top controversial new old
[–] Tippon@lemmy.dbzer0.com 51 points 7 months ago* (last edited 7 months ago) (2 children)

There's an extension for Firefox and maybe Chrome that should help. I think it's called ClearURL, or something similar. It removes the trackers from the ends of URLs

EDIT: That's assuming that it's a legitimate tracking URL, and not something that's been added by malware.

[–] helenslunch@feddit.nl 14 points 7 months ago (2 children)

It removes the trackers from the ends of URLs

These are not tracking links in the conventional sense where they append tracking data to the legitimate link. They just hijack the link that someone else posts and replace it with an entirely new tracking link with a l.facebook.com domain.

No link cleaning software I have found works because of this.

[–] F_Haxhausen@lemmy.world 3 points 7 months ago (2 children)

Maybe don’t use Facebook or any other site that does this?

I’ve been told this is an unreasonable solution.

It's a solution. Sadly, it doesn't solve the problem in a way that satisfies the OP. So, yeah. Not really a resonable solution for OP or most people.

[–] helenslunch@feddit.nl 3 points 7 months ago* (last edited 7 months ago) (1 children)

Not helpful, thanks.

Not really going to justify my usage but suffice it to say my business is largely dependent on networking with the people who are active on social media.

Twitter and Reddit I am "read only" via Stealth and Squawker.

[–] Tippon@lemmy.dbzer0.com -5 points 7 months ago (3 children)

That sounds more like malware then. Links from Twitter shouldn't have any Facebook tracking info.

Check your browser for any extensions that you don't recognise, and if you're on Windows, download and run the free version of Malwarebytes.

[–] Limitless_screaming@kbin.social 12 points 7 months ago (2 children)

The site itself; Facebook, Reddit, or Twitter sends you to a subdomain that then redirects you to the link you clicked. Sometimes used to check the url and warn you if it's malicious or if it's linking to another website, but it's usually used for tracking as well.

[–] Nyfure@kbin.social 6 points 7 months ago

try SkipRedirect, can break some things though, but rare.
Only works for hijacked links where the extension can grab the original link somehow of course.

For general Ad Links, there is FastForward, though i feel it hasnt been on the same level of maintenance since UniversalBypass closed down and they forked it.

[–] Tippon@lemmy.dbzer0.com 2 points 7 months ago

They just hijack the link that someone else posts and replace it with an entirely new tracking link with a l.facebook.com domain

This bit confused me. I thought OP meant that it was the same link every time. The downside of text based forums like this - it removes a lot of nuance and leaves room for misunderstanding.

[–] helenslunch@feddit.nl 4 points 7 months ago (1 children)

Links from Twitter shouldn't have any Facebook tracking info

That's not what I'm saying.

[–] Tippon@lemmy.dbzer0.com 0 points 7 months ago (1 children)

They just hijack the link that someone else posts and replace it with an entirely new tracking link with a l.facebook.com domain

So this isn't Facebook on every occasion then, it's related to the site you're visiting? If so, the extension will hopefully fix it :)

[–] helenslunch@feddit.nl 1 points 7 months ago

No it's not, you misread my statement. It's regarding the type of link and not the site itself.

[–] noodlejetski@lemm.ee 1 points 7 months ago

no, links from Twitter are instead automatically converted to a t.co URL.

[–] BuckShot686@beehaw.org 11 points 7 months ago (1 children)

I don't have an extention on FF but whenever I copy a link there's an option to also copy clean link. I'm not home, but I believe this is associated with my search engine being SearXNG.

[–] lemonuri@lemmy.ml 20 points 7 months ago (1 children)

This is actually a rather new feature in the firefox browser unrelated to searx.

[–] wildginger@lemmy.myserv.one 5 points 7 months ago (1 children)

Is that feature default for vanilla firefox? Or do you need to go fiddle in settings to turn that on

[–] Tippon@lemmy.dbzer0.com 10 points 7 months ago (1 children)

Vanilla.

The only reason I didn't mention it is because it's for copying links, whereas the extension should do it while opening, without needing to copy it first.

[–] wildginger@lemmy.myserv.one 8 points 7 months ago

Thats a level of convenience that will probably get me to grab the extension, but Im glad firefox has that as a feature anyway

[–] kurikai@lemmy.world 29 points 7 months ago (1 children)

Firefox can do it without an extension now

[–] Loucypher@lemmy.ml 8 points 7 months ago

Long live the Fox

[–] ccf@lemmy.world 15 points 7 months ago

I believe Skip Redirect does this, it's available for both Firefox and Chrome

[–] Aux@lemmy.world 3 points 7 months ago

Disable JavaScript.

[–] willya@lemmyf.uk 2 points 7 months ago
[–] driveway@lemmy.zip 1 points 7 months ago (2 children)

NextDNS, Brave Browser, and I believe uBlock Origin has features to clean up the trackers and redirects from links.

[–] shreddy_scientist@lemmy.ml 7 points 7 months ago (1 children)

Looks like it's straight up through Firefox now a days: https://lemmy.world/post/8834978

[–] zeluko@kbin.social 2 points 7 months ago

Looks like its only for copy, not left-clicking to open it.
Also doesnt stop click-hijacking. If the Site encodes a url you cannot decode, you have to go through the site or, if the link is also visible as text, grab that.

[–] helenslunch@feddit.nl 2 points 7 months ago (1 children)

Tried that. They don't work for this.

[–] UnfortunateShort@lemmy.world 4 points 7 months ago (1 children)

uBlock requires you to enable an additional filter list I think (Privacy > AdGuard URL Tracking Protection)

[–] helenslunch@feddit.nl 1 points 7 months ago* (last edited 7 months ago)

My understanding is the only thing uBlock does it prevent you from visiting prohibited domains, but you're telling me it can modify the links from webpages on my clipboard?

[–] 0x0f@lemmy.blahaj.zone 1 points 7 months ago

blocking the intermediate domain works for me with twitter, it fails the first time and gives up trying to rewrite.

[–] Anonymouse@lemmy.world 1 points 7 months ago

If it's showing at the bottom of the browser, then the browser thinks the link is a regular link, but clicking or copying it may invoke some JavaScript that either manipulates the link or simply redirects to the tracker site after an onClick event. I'd like to see this for my own curiosity. If my thought is correct, then there should be some way to disable that specific method call with uBlock or some other mechanism. I'm curious what happens with a text based browser or screen reader type browser. You could also trace the JavaScript and see what's happening. If this is really happening with the big social media sites, it's just a matter of time until a plugin is developed to correct the behavior.

[–] markkdark@lemmy.ml 1 points 7 months ago (1 children)

I use LibreWolf and maximum protection just for FB and similar web pages, and Firefox for normal browsing or other safe sites and my problem is solved.

[–] helenslunch@feddit.nl 1 points 7 months ago* (last edited 7 months ago)

Well. That doesn't solve this problem. But thank you.

[–] sabreW4K3@lemmy.tf 1 points 7 months ago
[–] some_guy@lemmy.sdf.org 0 points 7 months ago

I'm gonna sound like a dick who didn't really address the intended question, but why use those sites? Not being on corporate social media solves the problem. I know that doesn't work for a lot of people, so apologies to those folks.