PSA: Reddit has enhanced their tracking - they now use the API to track everything you do on reddit

Brandon James
Brandon James

yeah I know fuck reddit but this is important

3 days ago, a commit (github.com/ryanbr/fanboy-adblock/commit/60a4a73cf177b26ab54f746e992d40d3ba867c5e) was made to Fanboy's Enhanced Tracking List to ensure ALL requests to reddit.com/api are NOT blocked, since it provides extensive functionality to use Reddits website on the desktop.
Today, I discovered that Reddit is now using their API to collect user events from users.
Previously, they used e.reddit.com, events.reddit.com, d.reddit.com and so on - all of these subdomains got added to adblock blacklists (and reddit tracks whether you use adblock).
Now, as you can see here (i.imgur.com/JfZytEE.png) they are using share.json to collect information.
Now let's block that URL and refresh the page.
Now we get a request to comment.json (i.imgur.com/JjcZiD5.png)
Let's block that and refresh.
Now we get a request to api/submit (i.imgur.com/LvjT5AR.png) - oops, more data trying to be sent away to the mothership.
This change is fairly recent, and I have never seen Reddit attempt to use their API as a backdoor to collecting information.
For those more technically inclined, you can refer to redditstatic.com/reddit.en.fTMK7jltQ3I.js line 9426 to see this in action. Create a breakpoint and look at the variables, the one of note is: events_collector_url: "reddit.com/api/vote.json" which is seemingly set when the page loads.
Also see line 9751 of the same file with e.analyticsV2.sendEvent - there are so many of those.
They're also POSTing data directly to reddit.com and if you block reddits tracking, it literally cries at you (i.imgur.com/8T54rze.png)
Also, if you block /api you can't do anything like submit posts or whatever. Great times.
Each time you block a URL it picks a new one randomly from their api endpoint to try and send the tracking data too, here's a sample
of what's sent (i.imgur.com/ORcHFi0.png)

source link in next post

Attached: aaronswartz-reddit.0.jpg (26 KB, 1200x800)

All urls found in this thread:

github.com/ryanbr/fanboy-adblock/commit/60a4a73cf177b26ab54f746e992d40d3ba867c5e)
i.imgur.com/JfZytEE.png)
i.imgur.com/JjcZiD5.png)
i.imgur.com/LvjT5AR.png)
redditstatic.com/reddit.en.fTMK7jltQ3I.js
reddit.com/api/vote.json"
i.imgur.com/8T54rze.png)
i.imgur.com/ORcHFi0.png)
reddit.com/r/stopadvertising/comments/87d1sq/psa_reddit_has_enhanced_their_tracking_they_now/

Jacob Sanders
Jacob Sanders

reddit.com/r/stopadvertising/comments/87d1sq/psa_reddit_has_enhanced_their_tracking_they_now/

Chase Edwards
Chase Edwards

implying Sup Forums is any less of a botnet than reddit

Attached: 1511471015716.gif (95 KB, 251x173)

Ethan Wood
Ethan Wood

Are they intentionally trying to kill their userbase? First they massban a bunch of subs and now this?
must suck to be a leddit user

Bentley Kelly
Bentley Kelly

literally >>>/reddit/

Lincoln Martin
Lincoln Martin

Going for an IPO, cleaning up the act for the market and then the owners cash out

Camden Wright
Camden Wright

having a reddit account
kys yourself

Levi Walker
Levi Walker

/thread

Juan Bailey
Juan Bailey

go away

Brody Bennett
Brody Bennett

I do not go on reddit
Why the hell should I care
More importantly, why post this on a site that is not reddit

Anthony Turner
Anthony Turner

it's technology news and reddit has become a resource for quite a few things, but like I said fuck reddit this is still important to know.

Gavin Butler
Gavin Butler

they're owned by Condé Nast

Dylan Torres
Dylan Torres

1) I don't have a reddit account even though I visit the site for various things (downloading videos, programming).

2) You don't need to load the JS to use the site (NoScript blocks it).

I would be very disappointed if the site required me to run their javascript. But they don't so I don't care. If you don't want them tracking you then don't create/use an account and don't allow their scripts to run.

I'm not saying you shouldn't be concerned, I'm saying there are solutions that exist.

Gavin Fisher
Gavin Fisher

you're right you only need js to post but you can browse it no problem

Kayden Wright
Kayden Wright

reddit

Attached: 1522258160087.gif (3.23 MB, 237x240)

Henry Miller
Henry Miller

samefag redditor

Gavin Parker
Gavin Parker

commie site acts like a commie state
IMAGINE MAH SHOK!

Attached: 1345161870311.gif (217 KB, 400x400)

Matthew Phillips
Matthew Phillips

The autist faggot

Attached: firefox-2018-03-28-14-46-07.png (14 KB, 578x172)

Kayden Harris
Kayden Harris

I can do that too

Attached: Screenshot-2018-03-28-at-12.48.14-PM.png (10 KB, 410x105)

Cameron Murphy
Cameron Murphy

Attached: 4L-5ae8uCvT.jpg (39 KB, 320x320)

Sebastian Gonzalez
Sebastian Gonzalez

they now use the API to track everything you do on reddit
but... they don't, based on the evidence you quoted. did you even bother reading this shit before parroting it?

Colton Richardson
Colton Richardson

Attached: nNBD7p1.png (65 KB, 1493x616)

Angel Russell
Angel Russell

Attached: gb2leddit.png (212 KB, 800x480)

Blake Sanchez
Blake Sanchez

You need scripts to load the new user pages.

Kevin Brooks
Kevin Brooks

I bet our alphabet agencies think Sup Forums is fucking hilarious.
Constantly bitching about botnets even though we know damn well our gov is not just lurking, but working directly with Sup Forums.
I bet they send these threads around in emails and have a good hearty chuckle.

Jason Wood
Jason Wood

Didn't you see the CIA leaks from last year?
There were some comments that were included in the dump and all the government employees sound like redditors. I don't think they would enjoy anything here.

Kayden Young
Kayden Young

Idk what you're trying to say, our government agencies have straight up come out and said that they lurk here to keep an eye on us, and I can guarantee that they are having laughs at our expense.
I'd fish for links but I'm at work.

Hudson Sanders
Hudson Sanders

I haven't seen anything about that but I am interested in finding a source. I'll try to look for something and post it if anyone else is interested.

Parker Stewart
Parker Stewart

some lowly IT user gets caught at work browsing /tv/
"uhh, just keeping track of these guys, looks like they're planning on crashing a plane or something"
bluff works too well
ends up heading the Four Chan monitoring team

Hudson Walker
Hudson Walker

Implying it's a bluff

Jaxson Thomas
Jaxson Thomas

If we were a successful botnet, gookmoot would be raising capital from investors, not scraping by with passes and sex toy adverts.

Austin Butler
Austin Butler

Nice shop

Logan Reyes
Logan Reyes

bigger trump internet lover
commie site

Jacob Young
Jacob Young

Go for it.

Blake Long
Blake Long

...so how exactly is this tracking people? What information are they gathering that wouldn't be gathered normally by your interaction with any website? On the reddit thread I'm seeing people list things like your votes and what thread/subreddit you're posting on, which is information that needs to be sent to the server in order for functionality like voting or posting to even work. Seriously, how the fuck else do they expect to be able to make a post if they don't want the site to know what thread/board they're trying to post to?

Xavier Lewis
Xavier Lewis

Not reading the post
Scrolling data is essential to use the website

Bentley Edwards
Bentley Edwards

Web related work isn't my specialty. Simply giving a link to a screenshot with parts of it blurred out and descriptions like "oops, more data trying to be sent away to the mothership." doesn't tell me what data is being sent, and my attention gets drawn to the parts of the screenshot they took the time to edit rather than the parts that are apparently relevant.

Aiden Sanchez
Aiden Sanchez

going on R*ddit in the first place

Levi Long
Levi Long

/v/catalog#s=oat

Nathaniel Harris
Nathaniel Harris

our government agencies
Sorry, not a burgershit.

Benjamin Stewart
Benjamin Stewart

Reddit made an achievement, by being bigger shit than cuckchan.

Attached: ritsu.jpg (8 KB, 200x200)

Nathan Garcia
Nathan Garcia

go back

Christopher Foster
Christopher Foster

ends up heading the Four Chan monitoring team
Hello Bernd

Attached: 1475413430451.png (199 KB, 439x392)

Isaac Rivera
Isaac Rivera

Implying any real country isn't monitoring this cess pool

Benjamin Barnes
Benjamin Barnes

Seems like Reddit is a genuine honeypot.

Joseph Gomez
Joseph Gomez

kek

Aaron Gonzalez
Aaron Gonzalez

kek

Attached: redditfags.jpg (92 KB, 352x350)

Nathan Jenkins
Nathan Jenkins

Good

Brandon Fisher
Brandon Fisher

Attached: 1469874329105.jpg (103 KB, 664x567)

Camden Wood
Camden Wood

reddit
important
No, it's not. Seriously.

Brayden Lee
Brayden Lee

go discuss it on reddit dipshit

Adam Stewart
Adam Stewart

if /v/ is the asshole of the internet
if

Attached: 1427019808991.jpg (3.92 MB, 10000x10000)

Jackson Reed
Jackson Reed

Implying he's telling the truth

Jayden Williams
Jayden Williams

Reddit can see what Reddit users do on Reddit

wow it's fucking nothing

Parker Scott
Parker Scott

everything YOU do on reddit

Attached: 20171007045958930.jpg (25 KB, 881x664)

Parker Miller
Parker Miller

Why is this such a big deal? Same as the facebook bullshit. Are normies really this retarded?

use botnet
"careful, this is botnet"
yeah yeah I know, who cares
"breaking news: this is botnet!"
pinkwojaks.jpg
t. normies

Colton Perez
Colton Perez

Does this only take effect when you're logged in?

Jackson Taylor
Jackson Taylor

because it's not server side, it's abnormal, seems to be a method to get people to drop their adblocker.

yes

Angel Price
Angel Price

the government found my munchkin multireddit

Attached: uh-oh.jpg (10 KB, 251x189)

Josiah Bailey
Josiah Bailey

What's even the point in multireddits? Just do
/r/subreddit1+subreddit2+subreddit3+subreddit4

Blake Ross
Blake Ross

this. how is this a problem for anyone who isn't actually a fucking reddit faggot

Angel Hill
Angel Hill

They closed the source codes of everything last year. It's expected that they'll become even more of a police state.

Elijah Roberts
Elijah Roberts

didn't their canary also get triggered?

Wyatt Scott
Wyatt Scott

Does this change anything if Im permad on a bunch of reddit accounts?
If I change IP and clear cookies I can still sign up more right?

John Price
John Price

Literally not an issue.

Luis Jones
Luis Jones

why is this a problem

Disable AdBlock to view this page

Disable AdBlock to view this page

Confirm your age

This website may contain content of an adult nature. If you are under the age of 18, if such content offends you or if it is illegal to view such content in your community, please EXIT.

Enter Exit

About Privacy

We use cookies to personalize content and ads, to provide social media features and to analyze our traffic. We also share information about your use of our site with our advertising and analytics partners.

Accept Exit