Slashdot Mirror
Several Major Browsers to Prevent Disabling of Click-Tracking 'Hyperlink Auditing' (bleepingcomputer.com)
x_t0ken_407 quotes BleepingComputer: A HTML standard called hyperlink auditing that allows sites to track link clicks is enabled by default on Safari, Chrome, Opera, and Microsoft Edge, but will soon have no way to disable it. As it is considered a privacy risk, browsers previously allowed you to disable this feature. Now they are going in the opposite direction.
Hyperlink auditing is an HTML standard that allows the creation of special links that ping back to a specified URL when they are clicked on. These pings are done in the form of a POST request to the specified web page that can then examine the request headers to see what page the link was clicked on.
The article concludes that "Firefox and Brave win the award" for people who want this click-tracking capability disabled -- since "only Brave and Firefox currently disable it by default, and do not appear to have any plans on enabling it in the future."
Hyperlink auditing is an HTML standard that allows the creation of special links that ping back to a specified URL when they are clicked on. These pings are done in the form of a POST request to the specified web page that can then examine the request headers to see what page the link was clicked on.
The article concludes that "Firefox and Brave win the award" for people who want this click-tracking capability disabled -- since "only Brave and Firefox currently disable it by default, and do not appear to have any plans on enabling it in the future."
Went looking for how to turn it off, article was kind enough to provide the necessary about:config setting, it's "browser.send_pings".
Firefox already has it off by default. Nice! for once.
I loathe links made in that manner because when you right-click them they aren't treated as links so you can't open them in a new tab with a right-click or copy the link etc. That is a mistake IMO, if it's a link when you left-click it then it should also be treated as a link when you right-click it.
Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
Chrome devs have removed the hidden setting while they debate promoting it into the regular settings UI. If you want this, star the bug (but don't flood the comments too much):
Issue 935978
Turned off by default in Pale Moon too.
(I checked...)
AC
There's always tampermonkey
Assuming it works... anyone got a site with these ping links?
The point is to also speed the request up. The ping can be done in parallel, you don't need to wait for your click-tracker to redirect you.
ad-blockers can also easily block the ping request.
Look folks, as long as Google has control of the browser engine source code, Google has you by the short hairs. Worse, control of the binaries as in Android. Open source or not. Not only is Firefox just an all round nicer browser to use (my opinion, if you disagree then please direct your fan mail to Larry Page) it is the only browser that gives a toss about your privacy.
When all you have is a hammer, every problem starts to look like a thumb.
No, "ping" isn't in the official HTML specification. What /. linked to is the Google's unofficial fork of HTML.
Wonder what the public key field is for?
They also break "command+click" which is supposed to open the link in a new tab.
#DeleteFacebook
You deranged idiots are incredible. You clearly want a police state where any person can be locked up on a whim if the "right people" disagree with them, and you think of yourselves as the "right people".
History is littered with the corpses of the victims of tyranny who themselves enabled that tyranny in the dreams of using it to oppress their political opponents.
At least the Trumpsters chanting "Lock her up!" had a list of actual violations of actual laws for which they wanter her locked up. The FBI even admitted to that list when James Comey infamously stated that "no reasonable" prosecutor would prosecuter her for her crimes, and then moments later announced that if anybody else did the same thing, that person WOULD be prosecuted. You people who've been snorting some sort of drug from Rachel Maddow or Chris Hayes or Chris Cuomo, or Don Lemon, etc have no flipping idea of what laws you imagine Trump has violated.
Morons.
More like Practically Chrome, Chrome, Chrome, and Chrome
Can I get spam with that?
This is why Firefox is doomed if it remains a hold-out. Money from the internet comes from advertising so the major platforms are going to find a way to sideline companies the size of Mozilla that spoil the party. The surprise here is that Safari has recently disabled this feature since Apple is much less beholden to advertising interests. There's a chance that the Safari change was inadvertent, or at least wan't considered very high up the corporate ladder. With luck Apple will put the feature back.
On page link they talk about this, with
To create a hyperlink auditing URL, you can simply create a normal hyperlink HTML tag, but also include a ping="[url]" variable.
<a href="https://www.google.com/"
ping="https://www.bleepingcomputer.com/pong.php"> Ping Me</a>
To wit: Ping Me
This will render on the page as a normal link to google.com and if you hover over it, will only show you the destination URL. It does not show you the ping back URL , so users will not even realize this is happening unless they examine the sites source code. Scripts that receive the ping POST request, can then parse the headers in order to see what page the ping came from and where the hyperlink audited link was going to.
The headers associated with the information sent in the ping request are shown below.
[HTTP_PING_FROM] => https:/ www.bleepingcomputer.com/ping.html
[HTTP_PING_TO] => https:/ www.google.com/
[CONTENT_TYPE] => text/ping
If the universe is someone's simulation -- does that mean the stars are just stuck pixels?
Or go around the other way - use this to generate faked pingbacks in large volume rendering the data collected useless.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
You can make the links work properly when right clicked, the problem is whoever coded it didn't care enough to make that happen.
The proper way to do it is to make it a normal link, but then hook up some JavaScript that stops the default link behavior and/or does something extra in the background.