11–20 of 75 posts
Do your users, your broken software and yourself a favor and don't put Facebook tracking crap everywhere.
There's a bug report regarding the missing header here: https://developers.facebook.com/bugs/1654459311255613/
Unfortunately it seems impossible to get in touch with Facebook devs directly.
Shocking! Abuse of power and shady tracking techniques by Facebook? Unheard of! Seriously, this cannot be surprising after learning that the Messenger app listens to everything you do, all the time. That's just off the top of my head. They are doing this and much more.
However, I've never seen a non-anecdotal source or even a source that gathers all anecdotes and gives a decent meta-analysis. Would you happen to have one?
Shocking! Abuse of power and shady tracking techniques by Facebook? Unheard of! Seriously, this cannot be surprising after learning that the Messenger app listens to everything you do, all the time. That's just off the top of my head. They are doing this and much more.
https://www.wired.com/story/facebooks-listening-smartphone-m...
If security of sensitive information depends on tokens in the URL, don't just give those URLs to a third party , how would that ever be a reasonable thing to do? (especially since the third party apparently hasn't given you any guarantees on how they treat that, otherwise we wouldn't be having this conversation?) Do your users, your broken software and yourself a favor and don't put Facebook tracking crap everywhere.
If security of sensitive information depends on tokens in the URL, don't just give those URLs to a third party , how would that ever be a reasonable thing to do? (especially since the third party apparently hasn't given you any guarantees on how they treat that, otherwise we wouldn't be having this conversation?) Do your users, your broken software and yourself a favor and don't put Facebook tracking crap everywhere.
That's because our industry is full of hopelessly under qualified people who somehow manage to create software by randomly throwing together bits of code from stackoverflow / books and tweaking it until it "works".
A friend of mine covers this more extensively in this blog post which I found a very interesting read: https://remusao.github.io/posts/static-comments.html
So I think it's still concerning that once they're in, they start crawling. Although not very surprising I have to say... That's their business after all.
I don't mind Facebook crawling pages as long as it respects robots.txt, but for the last few weeks we've been hammered by requests from Facebook-owned IP addresses (millions of hits daily, 50+ for the same URL at times). They don't even set the User-Agent header. There's a bug report regarding the missing header here: https://developers.facebook.com/bugs/1654459311255613/ Unfortunately it seems impossible to get in t…
> 1. they are crawling potentially sensitive information granted by links with tokens Don't put Facebook tracking on sensitive pages. Actually as a service to your users don't put it anywhere where it doesn't add value. > 2. they are triggering potentially harmful and/or confusing actions in your website by repeating links They only perform idempotent[0]* requests which should not have any negative effect if performe…
Isn't it obvious? For which reason, if not tracking and information gathering, would such a feature even exist? Best solution is still to block Facebook's infrastructures, as always.
I disagree, it's not at all obvious. Pixels are used for conversion tracking (cookie pixels/cookieless pixels). Crawl isn't necessary for a pixel to function.
> 1. they are crawling potentially sensitive information granted by links with tokens Don't put Facebook tracking on sensitive pages. Actually as a service to your users don't put it anywhere where it doesn't add value. > 2. they are triggering potentially harmful and/or confusing actions in your website by repeating links They only perform idempotent[0]* requests which should not have any negative effect if performe…
GET is only idempotent in theory. Way too many people abuse GET when creating websites.