51–60 of 214 posts
Yeah I had to implement this once because we ran a handful of ads on TikTok, so they wanted access to all of our traffic. I protested, saying they didn't need all traffic to do analytics for people who click through.. just tell me how to identify the traffic you need. This is fair, if somebody clicks on an ad then analytics would be expected. Yeah no, they didn't allow their advertisers to do that. I ended up getting…
Why not use the "server to server" api for conversion events?
Just use NoScript, uBlock and/or a VPN with a PiHole server as a primary DNS and stop whining. Of course I do hate it that the only way to make money on the web today is though ads and trackers. Of course I hate it to be monitored by sneaky pixels, even if I don't use the app. But the solution to the problem is quite simple: does my browser actually render and run the Javascript? If the answer is no (because the trac…
As a practical matter, this means that while I can tell my mother to install uBlock Origin on her desktop browser, it isn't practical for me to tell her to root her phone and run Adaway on it.
Of course, most people use smartphones much more than they do PCs lately.
No surprise. Every company with an ad platform uses a pixel. Meta, Google, Reddit, Microsoft. Advertisers add it to their site to get access to things like tracking of performance if their ads, and custom audiences for retargeting or look-alike audiences. In exchange, that ad platform gets your browsing data. It's not great, but everyone is doing it so I wouldn't consider the fact that TikTok, one of the biggest soci…
The TikTok pixel is not actually a pixel like in the old days. It is not a 1x1 transparent image loaded from their servers. It is executable javascript code. All you have to do to stop 99% of the corporate spying is disable unsafe remote code execution. It's hard to believe I have to say that after the many decades of people getting it drilled into their heads "Do not open random email attachments" but here we are in…
I really really wish that I could convince Web Developers that not every website needs to be a web app. I keep bringing up that I don't want JS to execute random code, even if it's sandboxed, it's mostly unnecessary, and I always get the same sort of replies. Everyone calls me out of touch, I'm downvoted to oblivion, everyone suggests that I'm a unique case and everyone wants JS, they say that they don't want fragmen…
As opposed to Google and Facebook, two companies known for their zealous defense of privacy?
That's not the point. No one said other companies didn't do similar things. I assume they all want to get as much info as possible without breaking the law. I think the elephant in the room however is that they also send a copy to the Chinese Communist Party databases as well.
No surprise. Every company with an ad platform uses a pixel. Meta, Google, Reddit, Microsoft. Advertisers add it to their site to get access to things like tracking of performance if their ads, and custom audiences for retargeting or look-alike audiences. In exchange, that ad platform gets your browsing data. It's not great, but everyone is doing it so I wouldn't consider the fact that TikTok, one of the biggest soci…
If so, I don't see any problem with that. The only customers accessing that page would be incoming ad clicks.
Earlier quoted context omitted.
It appears to just be an HTTP 301 redirect, so you could use something like curl to unroll it: curl -I https://www.tiktok.com/t/ZTRmqkW4N produces: HTTP/2 301 server: nginx content-type: text/html; charset=utf-8 location: https://www.tiktok.com/@spencer.sebastian.yang/video/7149578560230034734?_t=8W9Y6CPjvbf&_r=1 Trim off the GET params (the bit after the ? in the URL) and you get https://www.tiktok.com/@spencer.seba…
When you run that curl command, TikTok already knows your IP, which is a very valuable piece of information. Unless you maintain a server that has its own IP and does nothing except de-personalizing TikTok links, and always visit the tracking-free URL from another computer with a different IP, something like that. While it is possible, I am pretty sure most people, including most people here, don't want to do that.
On the other hand, I don't think most people consider a public IP address to be private or protected information. If you're interested in finding the "root" content URL, which lives on a TikTok domain, then you've already implicitly signaled that you accept them knowing your public IP address.
Earlier quoted context omitted.
Exactly, with a Pi-Hole.
Unfortunately, the TikTok app falls back on DoH if it detects domain blocking. https://www.reddit.com/r/AppSecurity/comments/f422f3/tiktok_...