Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Incapacitating Google Tag Manager (2022)

backlit.neocities.org

Post reply on HN
Print view View original

151–160 of 160 posts

Re: Incapacitating Google Tag Manager (2022)

#151

Post by gnz11 »

simonw wrote: post #99
mlinsey wrote: post #44

Earlier quoted context omitted.

Google Tag Manager is a single place for you to drop in and manage all the tracking snippets you might want to add to your site. When I've worked on B2C sites that run a lot of paid advertising campaigns, the marketing team would frequently ask me to add this tracking pixel or another, usually when we were testing a new ad channel. Want to start running ads on Snapchat? Gotta ad the Snapchat tracker to your site to k…

The self-service thing is such a nightmare. There are two things that you almost certainly cannot trust your marketing team with: 1. Understanding the security implications of code they add via tag manager. How good are they at auditing the third parties that they introduce to make sure they have rock-solid security? Even worse, do they understand that they need to be very careful not to add JavaScript code that some…

Agreed that it's a nightmare, but what usually happens then is that an MBA-type VP will come in and demand the marketing team be allowed to insert whatever they want. Not many dev teams have the political clout to push back.

Re: Incapacitating Google Tag Manager (2022)

#152

Post by redeeman »

jeroenhd wrote: post #141
culi wrote: post #87

Earlier quoted context omitted.

You're talking about Adnauseum https://adnauseam.io/ Chrome banned it from their add on store but it can still be installed manually

AdNaueam works against ads, but does it also work against Google Tag Manager? I've already got most ads blocked by simply Piholing them, but GTM tracking my every move using first-party content is a different kind of interaction to attack.

just block GTM

Re: Incapacitating Google Tag Manager (2022)

#153

Post by goopypoop »

adamiscool8 wrote: post #28

I don't think this article makes a good case for why you should. >The more of us who incapacitate Google's analytics products and their support mechanism, the better. Not just for the good of each individual person implementing the blocks - but in a wider sense, because if enough people block Google Analytics 4, it will go the same way as Universal Google Analytics. These products rely on gaining access to the majori…

> Should we go back to static pages and mining Urchin extracts, and guessing what people care about?

Yes absolutely do this please.

Why even bother with the effort of analytics only to ignore the answers? I'm honestly not sure I've ever seen a website improve.

Re: Incapacitating Google Tag Manager (2022)

#154

Post by dotancohen »

snickerdoodle12 wrote: post #126
dotancohen wrote: post #118

Earlier quoted context omitted.

> JLCPCB How are they?

I've only used them once for my first (and so far only) PCB, so as a complete amateur, it was great. They rejected my first design which had an obvious flaw, and my second design was in my hands a little over a week after I uploaded it. I paid 2.60EUR for 5 (tiny) PCBs and 7.50EUR for the shipping. They even placed and soldered components for me.

That's very reasonable, especially if those were SMT components.

Re: Incapacitating Google Tag Manager (2022)

#155

Post by genewitch »

wglb wrote: post #150
zelphirkalt wrote: post #133

Earlier quoted context omitted.

Even if it merely makes using Google shenanigans unattractive for advertisers, that would be a huge win against one of the biggest perpetrators, privacy and data protection violators out there.

How unattractive do you think it will make it for them?

about -$25,000 a year, give or take.

Re: Incapacitating Google Tag Manager (2022)

#156

Post by fsflover »

mschuster91 wrote: post #136
sneak wrote: post #70

Earlier quoted context omitted.

> I hate ads > The only entity you're hurting are the advertisers using Google. That’s fine. Advertising is cancer. Reducing advertisers’ ROI is good too. You don’t hate ads if you’re spending $500k on them. You just hate receiving ads, which makes you hypocritical.

Well, in today's reality you need a job to at least pay rent. And employers need advertising to make money to pay their workers. It's factually impossible to live in modern society without participating in ethically questionable activities at least indirectly.

DuckDuckGo is profitable without targeted ads.

Re: Incapacitating Google Tag Manager (2022)

#157

Post by alganet »

Timwi wrote: post #148
alganet wrote: post #12

Earlier quoted context omitted.

Use a whitelist-based extension such as NoScript: https://noscript.net You can then enable just enough JS to make sites work, slowly building a list of just what is necessary. It can also block fonts, webgl, prefetch, ping and all those other supercookie-enabling techniques. The same with traditional cookies. I use Cookie AutoDelete to remove _all_ cookies as soon as I close the tab. I can then whitelist the ones I n…

Why would JIT be more likely to have such a vulnerability than a JavaScript engine without JIT?

I honestly don't know. I just noticed a lot of CVEs related to JS JIT in different browsers.

Re: Incapacitating Google Tag Manager (2022)

#158

Post by egorfine »

mrweasel wrote: post #143
aerzen wrote: post #20

Am I dumb or does this article fail to explain what does the tag manager actually do? And not just with a loaded word, such as surveillance or spying, but actually technically explain what they are selling for and why it is bad.

This may have changed, I last used Tag Manager 9-10 ago. You basically added a single Javascript snippet to you website, then you could inject other Javascript into the pages, using various rules. So rather than having to redeploy our site every time the marketing department wanted to add a new tracking or retargeting script, we could just add it in Tag Manager. I think is a great tool if you insist on doing these ty…

> This may have changed, I last used Tag Manager 9-10 ago.

GTM from 9-10 years ago and GTM today have nothing in common.

Re: Incapacitating Google Tag Manager (2022)

#160

Post by 1oooqooq »

jpgreens wrote: post #83
1oooqooq wrote: post #11

Earlier quoted context omitted.

https://someonewhocares.org/hosts/zero/

What if we could resolve every domain to 0.0.0.0 by default at the start. When visiting a website manually through the browser's URL bar it would automatically be whitelisted. Clicking links would also whitelist the domain of the link only. Sure you'd have to occasionally allow some 3rd party domains as well. Guess it would be cumbersome at first but after a while it would be pretty stable and wouldn't require much e…

that's exactly what uBlockOrigin does in advanced mode.

enjoy.

Post reply on HN