31–40 of 214 posts
Earlier quoted context omitted.
Download the video and send it the old-fashioned way, is really the only option.
You can disable the link tracking thing in settings, bit buried but settings > privacy > suggest your account to others > people who open or send links to you
It's hard to believe I have to say that after the many decades of people getting it drilled into their heads "Do not open random email attachments" but here we are in a dark future where everyone is going to say not automatically running untrusted code is stupid and not a real option. It is. And it works.
> You can’t stop data collection from the tech industry altogether, but with a few simple steps you can make a dent in the amount of information that’s being collected. > Use privacy-protecting browser extensions. You can add extensions to your browser that will do a lot to protect your privacy. One is Disconnect, made by the company that performed our TikTok investigation. The Disconnect extension shows you how webs…
Shame uMatrix is dead, but I use it to allow javascript for the local domain, and disable for third-party domains by default. It allows me to use at least some websites without too much fiddling with the uMatrix settings.
Edit: After setting advanced mode, hit ctrl twice in the popup to get the green/gray/red filtering. https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-qu...
Earlier quoted context omitted.
What do you mean umatrix is dead? I'm using it now, and it's IMO hands down *the absolute best extension I have ever used*. uMatrix >> (uBO | noScript | privacy badger | cookie ninja | cookie autodelete | etc) I use all of them along with vimium-ff and midnightlizard, but uMatrix is by far the best idea for managing what is run for better privacy and performance of browsing.
I am also still using it and haven't run into any issues so far. But it is unmaintained for quite some time now last I checked so I assume that eventually it will just stop working. It's quite nice though. I have it set to disable any and all third party resources by default and from there it's generally fairly easy to permit the necessary things the first time I visit a site. And if it proves to be difficult I gener…
Except in the EU, I suppose?
Earlier quoted context omitted.
Download the video and send it the old-fashioned way, is really the only option.
You can disable the link tracking thing in settings, bit buried but settings > privacy > suggest your account to others > people who open or send links to you
And it's not even resource intensive to do something like this. It can all be done in a purely stateless manner by concatenating an internal ID with a counter and encrypting it to derive the URL that gets served to the user.
The moral of the story is, you should really download and share things yourself.
When you share a video link on TikTok, it’ll append a bunch of tracking data to know who opened it and notify you. That’s not really a surprise, but what’s more sneaky is they shorten the “shared” video links into a few unique characters without visible tracking data and parameters in the URL (AFAIK they used to visibly expose tracking data on the URL a few years ago but recently started using a URL shortener). ie. h…
Wow that’s scary. Is there a way to share a video without that?
curl -I https://www.tiktok.com/t/ZTRmqkW4N
HTTP/2 301
server: nginx
content-type: text/html; charset=utf-8
location: https://www.tiktok.com/@spencer.sebastian.yang/video/7149578560230034734?_t=8W9Y6CPjvbf&_r=1
I did check to see if that resulting URL after the first redirect is also a redirect. It is not, but also returned an HTTP 403 response ('Forbidden'), when submitted without cookies that had been added.
The TikTok pixel is not actually a pixel like in the old days. It is not a 1x1 transparent image loaded from their servers. It is executable javascript code. All you have to do to stop 99% of the corporate spying is disable unsafe remote code execution. It's hard to believe I have to say that after the many decades of people getting it drilled into their heads "Do not open random email attachments" but here we are in…
I keep bringing up that I don't want JS to execute random code, even if it's sandboxed, it's mostly unnecessary, and I always get the same sort of replies.
Everyone calls me out of touch, I'm downvoted to oblivion, everyone suggests that I'm a unique case and everyone wants JS, they say that they don't want fragmentation and want life to be easier for them.
I get it, their pay check literally depends on them using JS, it adds a lot of flexibility.
I'm going to make the additional, controversial, guess that most web-developers don't really know what they're doing either; I would surmise that they lean on frameworks and if those frameworks are ever under threat (from people like me requesting progressive enhancement) then they need to defend the frameworks to defend themselves.